Financial Services SpeedRead: 29 September 2026 edition
Welcome to the latest edition of the Financial Services SpeedRead, a collection of bite-sized updates designed to help you keep on top of key regulatory developments in financial services over the preceding fortnight. Please get in touch if you want to explore any of the topics covered in this fortnight's edition of Financial Services SpeedRead in more detail.
On 10 September 2026, ESMA published its second Trends, Risks and Vulnerabilities Report of 2026, which includes an in-depth analysis of prediction markets as one of its highlighted topics. The report considers how prediction markets (platforms where participants trade contracts whose pay‑offs depend on future events) can contribute to a range of investor protection and market integrity concerns, and draws attention to the widening gap between Europe's and the US's regulatory approaches. For more information, see our LinkedIn post here.
ESMA’s work on prediction markets forms part of its broader assessment of structural developments in EU financial markets and the potential channels through which new market-based mechanisms may transmit or amplify risks. The analysis sits alongside its broader review of market-based finance, technology IPO trends and other emerging market structures during the first half of 2026.
On 9 September 2026, ESMA published a package of materials under the Prospectus Regulation to reflect changes introduced by the Listing Act, as part of its simplification and burden-reduction efforts. The package includes a consultation paper on updated disclosure requirements guidelines, updated Q&As, a final report on guidelines for product supplements and a final report on regulatory technical standards (RTS) on key financial information in prospectus summaries. The guidelines on product supplements will apply when the translations into all official EU languages become available. Further, ESMA has submitted the Final Report on RTS to the European Commission for a decision on whether to adopt the RTS updating Commission Delegated Regulation 2019/979.
The consultation paper proposes the following key changes:
Stakeholders are invited to respond to the consultation by 9 November 2026. ESMA expects to publish the final report and updated guidelines in Q1 2027.
On 28 August 2026, the FCA published Primary Market Bulletin 65, its latest newsletter for primary market participants. Key points addressed in the bulletin include:
On 18 September 2026, the European Central Bank published an updated Guide to licence applications, setting out the assessment criteria and procedures for licensing credit institutions within the Single Supervisory Mechanism (SSM).
The Guide replaces the 2019 edition and applies to all applications for a licence to become a credit institution under the Capital Requirements Regulation (CRR), including, but not limited to, initial authorisations for credit institutions, bridge bank applications and licence extensions. It serves as a non-binding tool to promote transparency and consistency in the licensing of credit institutions across SSM jurisdictions.
The Guide will be regularly reviewed to account for ongoing developments in supervisory practices, regulatory changes, and interpretations of the Capital Requirements Directive.
On 11 September 2026, the EU Commission published Delegated Regulation (EU) 2026/1221, amending the Capital Requirement Regulations ((EU) No 575/2013) to introduce temporary operational relief measures and targeted multipliers for the calculation of institutions' own funds requirements for market risk. The delegated regulation addresses competitive distortions arising from delays in the implementation of the Fundamental Review of the Trading Book standards by other Basel Committee member jurisdictions.
Institutions may, until 31 December 2029, use the alternative internal model approach for trading desks that do not pass the profit and loss attribution test and treat a greater number of risk factors as modellable under a relaxed non-modellable risk factor framework. A 0.9 multiplier applies to own funds requirements calculated under the alternative standardised approach and the simplified standardised approach. Institutions adversely affected by the new market risk rules may also apply a bank-specific multiplier, recalibrated quarterly, to cap the capital impact at Basel 2.5 levels.
The delegated regulation enters into force on the day following its publication in the Official Journal and applies from 1 January 2027. The relief measures expire on 31 December 2029.
On 3 September 2026, the EU Commission published two closely related regulations that flesh out the operational risk framework under the Capital Requirements Regulation.
Delegated Regulation (EU) 2026/1167 sets out regulatory technical standards for calculating the business indicator used in operational risk capital requirements, including detailed rules on sub-item composition, loss event classification for larger institutions (those with a business indicator of EUR 750 million or more), and adjustments to capital requirements following corporate restructuring events such as mergers, acquisitions, or disposals.
Complementing this, Implementing Regulation (EU) 2026/1166 maps each business indicator component - covering interest, dividends, fees and commissions, trading and banking book items, and other operating income and expenses - to the corresponding FINREP supervisory reporting template cells, requiring institutions to adjust reported values where an exact match is not available.
Both regulations enter into force on 23 September 2026.
On 25 August 2026, the EBA published a consultation paper on three draft regulatory technical standards (RTS) on the reclassification of investment firms as credit institutions when they exceed the EUR 30 billion total assets threshold. The RTS reflect 2024 amendments to the Capital Requirements Directive, which narrow the scope of the threshold calculation to EU-domiciled entities. The proposals clarify:
The consultation closes on 25 November 2026.
No recent updates.
On 18 September 2026, the EBA published its final report on guidelines for the sound management of third-party risk related to non-ICT services. The guidelines replace the 2019 EBA Guidelines on outsourcing arrangements, broadening the framework to cover all third-party arrangements and aligning it with DORA. It therefore extends beyond outsourcing to all non-ICT third-party arrangements, with stricter requirements for those supporting critical or important functions.
A two-year transitional period will apply for reviewing existing arrangements that support critical or important functions.
On 14 September 2026, the FCA published the Upper Tribunal's decision in Robin Crispin Odey v Financial Conduct Authority, upholding a prohibition order banning Mr Odey from the financial services industry and imposing a reduced financial penalty of £1,529,374.
Mr Odey was the founder and majority owner of Odey Asset Management LLP (OAM). Between December 2021 and November 2022, he twice removed OAM's Executive Committee and threatened executive directors in order to frustrate an internal disciplinary process into his alleged breaches of a final written warning issued to Mr Odey for repeated and persistent inappropriate behaviour towards female employees.
The Tribunal upheld all of the FCA's allegations, finding that Mr Odey's actions were motivated by self-interest, demonstrated a reckless disregard for OAM's governance and regulatory obligations, and risked entrenching a culture where inappropriate behaviour was normalised. His dealings with OAM, its investors and the FCA also lacked candour, which included false assertions to and threatening behaviour towards the FCA's staff. Throughout the trial, Mr Odey was found to have lacked credibility, and demonstrated a lack of understanding as to why his conduct lacked integrity.
The Tribunal reduced the FCA's proposed fine from £1,835,200 to £1,529,374 after deciding that no uplift for aggravating factors should apply. The prohibition order was upheld in full.
On 16 September 2026, the UK Government published the Anti-Money Laundering and Asset Recovery Strategy 2026–2029, setting out its approach to tackling money laundering and recovering criminal assets over the next three years.
The strategy is structured around three pillars: (i) Target; (ii) Integrate; and (iii) Empower – aimed at focusing effort on the highest-harm threats, improving cross-system co-operation and strengthening enforcement capability.
By the end of the three years, key measures within each pillar include:
The Government will publish progress reports mid-way through and at the end of the strategy period.
On 9 September 2026, the Financial Action Task Force (FATF) published a report on "Risks of Gaming and Gambling", accompanied by red flag risk indicators for the gaming and gambling sectors. The report updates the FATF's previous 2009 analysis of money laundering, terrorist financing and proliferation financing risks across casinos, gambling and gaming, to reflect the expansion of online, cross-border and multi-product platforms (for example, the growth of prediction market platforms).
Key findings of the report include:
The report recommends that jurisdictions strengthen licensing requirements, improve risk awareness and enhance international co-operation to address these risks.
On 18 September 2026, the FCA published a speech delivered by Lucy Castledine, director of consumer investments at the FCA, at the 2026 Investor Summit in London. The speech outlines the FCA's approach to supporting growth and wider access to investments, promoting simpler and clearer consumer communications, and strengthening action against scams and illegal financial promotions.
The speech covered the following topics:
The FCA will continue its engagement to deliver a stronger investment culture in the UK, with further related publications planned in 2026-2027.
On 7 September 2026, the High Court handed down its judgment in Grogan v IG Index Ltd [2026] EWHC 1998 (Ch), dismissing all claims brought by an individual against spread betting provider IG Index Ltd. The claimant alleged the defendant should not have opened his spread betting account or should have closed it earlier, on the basis that he was a self-described "gambling addict", having lost over £1 million between 2018 and 2022. He claimed the defendant breached its appropriateness obligations under COBS 10A, failed to identify him as a vulnerable customer, and failed to act in his best interests under COBS 2.1.1R.
Following precedent cases, the court held there was no ongoing duty to reassess appropriateness. On vulnerability, the court found the claimant had not disclosed a gambling addiction and his trading pattern did not oblige the defendant to close the account. The court also rejected claims based on fiduciary duty. The claim was dismissed in its entirety.
On 16 September 2026, the FCA published Policy Statement PS26/18 setting out guidance to help firms understand how the law underpinning the UK's future cryptoasset regime applies to their business. The guidance follows the FCA's finalisation of its rules and guidance in June 2026 and legislation set out by the Government in February 2026 to bring cryptoassets into UK regulation. The regime comes into force on 25 October 2027.
The guidance addresses the following key areas:
On 15 September 2026, the Government laid before Parliament a draft statutory instrument (the Financial Services and Markets Act 2000 (Cryptoassets) (Miscellaneous Amendments) Regulations 2026 (the Regulations)) which makes targeted amendments to the UK's developing regulatory framework for certain cryptoassets.
Among other changes, the statutory instrument excludes activities involving UK qualifying stablecoins from the cryptoasset dealing and arranging regulated activities, although lending and borrowing activities involving such stablecoins remain in scope. The temporary holding of UK qualifying stablecoins is also excluded from the cryptoasset safeguarding activity where held in connection with a payment transaction. Further exclusions for proprietary trading, market making and certain technical services are introduced, with corresponding amendments set to be made to the financial promotions regime.
On 14 September 2026, the FCA published a call for input exploring the opportunities and risks of tokenised gold for UK wholesale financial markets. The publication follows a joint paper with the BoE on the future of tokenisation, to which respondents highlighted gold as a key use case given the international strength of London's spot gold trading market.
Key points addressed in the call for input include: the potential for tokenised gold to serve as wholesale collateral, enabling faster settlement and reduced reconciliation risks; the legal and regulatory questions on token-holder rights, insolvency treatment and settlement finality; and uncertainty around the collective investment scheme and alternative investment fund perimeter and its impact on tokenised gold use cases.
Responses to the call for input are due by 23 October 2026.
On 14 September 2026, the FCA and the BoE published a feedback statement (FS26/1) summarising responses to their joint Call for Input on tokenisation in UK wholesale financial markets. The Call for Input, published in May 2026, set out the authorities' joint ambition to enable tokenisation, building on HMT's Wholesale Financial Markets Digital Strategy.
The feedback statement highlights the following key themes from the responses:
The FCA and BoE intend to publish a joint Tokenisation Roadmap later in 2026 and the FCA plans to consult on custody rules for RSICs in the first half of 2027.
On 2 September 2026, the FCA published insights from a multi-firm review examining how frontier AI may affect firms' cyber resilience, governance and vulnerability management. The review follows the FCA's May 2026 joint statement that frontier AI models represent a step-change in capability with significant implications for cybersecurity and operational resilience. Key themes from the review include:
The FCA encourages firms to consider the findings in the context of their own arrangements and to review further resources referenced in the publication.
On 27 August 2026, HMT announced its intention to give the BoE a new responsibility (by way of a secondary objective) to support innovation in payment systems and emerging forms of digital money. This will extend the BoE's current secondary innovation objective for central counterparties and central securities depositories, introduced through the Financial Services and Markets Act 2023, and sit below the BoE's primary financial stability objective, meaning that the BoE would not be required to support innovation where doing so would undermine financial stability. As part of this objective, the BoE will report annually to Parliament on how it is advancing the innovation objective.
The Government expects to implement this change through amendments to the Financial Services and Markets Bill, which will next be debated in the House of Lords on 7 and 9 September 2026.
No recent updates.
On 7 September 2026, the FCA published lessons for firms from its Defence, Security, and Resilience (DSR) Lab, held in partnership with the Ministry of Defence. The DSR Lab brought together around 120 leaders from financial services, government and defence to explore systemic risks and resilience through a scenario involving satellite spoofing, subsea cable damage and a cyberattack. Key findings from the DSR Lab include:
The FCA plans to further investigate intelligence sharing with the financial sector and whether more focus is needed on back-up technologies for use during disruption.
Authors: Jake Green, Partner; Bradley Rice, Partner
The information provided is not intended to be a comprehensive review of all developments in the law and practice, or to cover all aspects of those referred to.
Readers should take legal advice before applying it to specific issues or transactions.