AI Governance

ASIC's Form 280 (version dated 1 October 2021) is the mandatory notification that Australian companies must lodge for most share buy-backs that exceed the 10/12 limit, as well as for equal access scheme and selective buy-backs. Lodging it at least 14 days before the relevant date can remove the need to file Form 281. Compliance teams should confirm the correct buy-back type, documents, and timing to avoid procedural breaches.

The FCA's Instrument 2026/55 amends the Perimeter Guidance manual (PERG) to explain which cryptoasset activities will require authorization in the UK, and adds a cross-reference to CRYPTOPRU. Part 1 took effect on 16 September 2026, and the remainder takes effect on 25 October 2027. Firms should use the intervening period to assess their perimeter position and permissions.

EIOPA's Eurofi article finds that AI adoption in European insurance is outpacing risk controls, and that systemic cyber, concentration, and third-party dependency risks are growing. It argues the EU needs rigorous implementation of DORA and the AI Act, not a new layer of AI regulation for finance. Compliance teams should expect supervisors to focus on dependency mapping, failure testing, and exit-plan validation.

ASIC Form 2560 must be lodged before a company sends notice of a members' meeting to approve an equal or selective share capital reduction under section 256C(5) of the Corporations Act 2001. The form is dated 13 February 2015, so it is an existing procedural requirement rather than a new rule. Compliance teams should confirm that lodgement timing, accompanying documents, and follow-on filings are built into corporate action workflows.

The 10th Global Conference on Criminal Finances and Cryptoassets (September 15-16, 2026) brought together about 450 specialists from nearly 90 jurisdictions. It showed progress on blockchain intelligence standards, suspicious transaction reporting practices, and public-private intelligence sharing. The event is not binding regulation, but it signals where supervisory and law enforcement expectations are heading, which matters for compliance teams managing crypto-related financial crime exposure.

The Deutsche Bundesbank reports that German credit institutions posted aggregated pre-tax profit of EUR $52.3 Billion in 2025, the third consecutive year of high earnings, with operating income at a record EUR $172.5 Billion. Growth was driven largely by one major bank, and the Bundesbank warns that credit risk, cyber threats, and competitive pressure will keep 2026 challenging. Compliance and risk teams should treat the report as a supervisory signal on where scrutiny is likely to focus, not as a source of new obligations.

EIOPA's September 16, 2026 article (published via Eurofi) argues that aging demographics and uneven retirement confidence require national reforms with EU coordination, along with stronger EU-level supplementary products such as the PEPP or a "EuroPension" model. It is a policy position rather than binding regulation, but it signals the direction of supervisory expectations on DC design, defaults, transparency, and costs. Compliance teams at pension, asset management, and insurance firms should use it to anticipate product and disclosure changes.