Compliance & Ethics

The Federal Commissioner for Data Protection and Freedom of Information (BfDI) issued a statement on Germany's draft law implementing EU Regulation (EU) 2025/327 (EHDS Regulation) for healthcare data and digital innovation. The statement generally endorses the government's draft while providing detailed technical feedback on proposed amendments concerning access logging, document-level access controls in electronic patient records, research data linkability, and consent-based data processing authorization requirements. Healthcare organizations and health insurers operating in Germany should monitor this legislation closely as it will materially affect data governance obligations under both national law (SGB V, GDNG-E) and the EHDS framework.

The European Banking Authority has published a user guide explaining the conversion file that maps old DPM 1.0 glossary elements to the new DPM 2.0 glossary structure, resulting from its ongoing Quality Review project. Compliance and reporting teams must understand this mapping as it underpins the modeling of all EBA reporting frameworks and will inform the upcoming v4.0 release, directly affecting regulatory reporting taxonomies.

De Nederlandsche Bank (DNB) will hold a physical, Dutch-language information session on 5 November 2026 to explain its fit and proper assessment process for board members and key function holders. Compliance teams at supervised institutions should encourage affected candidates and HR/legal staff to register by 2 November to gain direct insight into assessment expectations and recent regulatory developments.

The AMF's 2025 annual data collection from 6,713 Financial Investment Advisors (CIFs) reveals growing market polarization, with the top 50 firms now capturing 52% of sector revenue, up from 49% in 2024. Compliance teams at affected firms and their professional associations should note the shifting revenue concentration, persistent fee-based compensation structures, and the continued marginal role of crypto-assets in CIF advisory activity.

The FCA has added "Hope Fund Bank" (hopefundbank.com) to its Warning List for providing or promoting financial services in the UK without authorization. Compliance teams should note this entity for screening purposes, as consumers dealing with it have no access to the Financial Ombudsman Service or FSCS protection.

De Nederlandsche Bank has released the AnaCredit reporting submission calendar for 2026, setting out monthly reporting periods and corresponding delivery deadlines for credit institutions. Compliance and regulatory reporting teams must align internal data production cycles with these fixed dates to avoid late or non-submission breaches.

ASIC is consulting on a 10-year extension (to 2037) of its CFD product intervention order, with amendments to modernize the definition of CFDs to capture digital asset-settled products and clarify margin requirements. CFD issuers and industry stakeholders have a short four-week window to respond, making prompt internal review essential for affected firms.