Compliance & Ethics

EIOPA's annual factsheet shows EEA insurers held EUR 7.9 trillion in government bonds, corporate bonds, and equities at year-end 2025, with notable home bias persisting in fixed income and growing unit-linked cross-border exposure. While not a binding regulatory requirement, the data provides compliance and risk teams with benchmarking insight into investment concentration, sovereign exposure, and diversification trends relevant to Solvency II prudent person principle assessments.

The Bundesbank's October 14, 2026 auction increased two outstanding federal bonds (maturing 2047 and 2056), raising a combined EUR 1,888.79 Million in allocations against total bids of EUR 3,860.00 Million. This is a routine sovereign debt issuance update with limited direct compliance impact but is relevant for institutions tracking German sovereign debt supply, market maintenance obligations, and fixed-income portfolio exposures.

ESMA's annual cross-border review found that retail client numbers receiving cross-border investment services rose 47% year-on-year to 15.5 million, while the number of passporting firms grew modestly. For compliance teams at firms providing cross-border investment services, this signals heightened regulatory attention on passporting activity and retail investor protection across Member States.

The Dutch Authority for the Financial Markets (AFM) published a personal blog by a senior official calling on financial institutions to take greater responsibility for consumer financial resilience, including by considering opt-out "automatic saving" defaults. The blog is not binding regulation, but it signals supervisory thinking on behavioral design and consumer outcomes. Compliance teams should treat it as an early indicator of potential expectations on product design and choice architecture.

The Spanish Data Protection Agency (AEPD) issued a favorable opinion on a bill creating the Electronic Judicial Office of Navarre, which implements Law 18/2011 on information technology use in the administration of justice. The AEPD recommends considering links to its own Electronic Office and to that of the General Council of the Judiciary, reflecting the division of supervisory competences over data protection. Compliance teams should note the emphasis on applying personal data security measures to information processed through judicial electronic portals.

The Norway Financial Supervisory Authority has listed a warning about fraudulent activities carried out under the name of Gablau Invest Sàrl, a purported Luxembourg company. The warning originates from Luxembourg's CSSF. Compliance teams should treat the entity as a potential investment fraud risk and update screening and client-protection controls.

The Norway Financial Supervisory Authority has published a warning that relays a Luxembourg CSSF notice about fraudulent activities by persons misusing the name of Neventa Management. The notice signals a cross-border impersonation fraud risk, and compliance teams should update screening and client-protection controls accordingly.