Looking for the latest insights and trends from the Financial Services and Gambling industry?

Directive (EU) 2022/2555 (Network and Information Security Directive 2 – NIS2) was published in the Official Journal of the European Union on December 27, 2022. It lays down measures aiming to achieve a high common level of cybersecurity across the union. This mapping EU Legislation: NIS2 page lays out the key dates, transposition dates of member states, as well as any RTS, ITS, delegated regulation, implementing regulation or guideline issued and published. It will be updated in line with any NIS2 update.

The Organisation for Economic Co-operation and Development’s (OECD) new multilateral reporting framework aims to address tax evasion and tax avoidance in the crypto-asset sector through information sharing and standardisation.

UK open banking has delivered a functioning ecosystem, but its growth remains incremental, leaving regulators and firms focused on open finance and the next phase of payments reform.

2025 was a significant year for anti-money laundering/counter-terrorism financing (AML/CTF) enforcement worldwide, with regulators imposing hefty penalties for non-compliance.

Mandatory enhanced due diligence (EDD) is set to apply to any Russian connection under EU anti-money laundering/counter-terrorism financing (AML/CTF) law, signalling a structural shift in regulatory expectations.

2026 will be a decisive year for the UK crypto-asset sector, as the Financial Conduct Authority (FCA) looks to finalise a comprehensive regulatory regime that will go live in October 2027, subject to parliamentary approval and final rule-making timelines.

In October 2025, the European Banking Authority (EBA) issued a report on white labelling – a practice where an institution provides products or services developed by a financial institution, but that are distributed under its own brand. The EBA’s report highlights a structural risk, as regulators have limited visibility into a rapidly expanding distribution model, making it impossible to quantify the true scale of potential exposure. This opacity amplifies supervisory sensitivity and indicates that white labelling will face heightened scrutiny in 2026. This regulatory influencer will examine both the potential consumer ramifications and the supervisory implications of white labelling in financial services.

The adoption of the euro will bring regulatory scrutiny, dual-currency obligations and new operational risks for banks and payments firms, requiring proactive monitoring, reporting and customer engagement.

A court ruling and a lawsuit seeking its protection mean the US Consumer Financial Protection Bureau (CFPB) remains active, although the trend for state-level regulation is creating challenges for payments firms.

In September 2025, the California Privacy Protection Agency (CPPA) finalized regulations to further strengthen the California Consumer Privacy Act (CCPA), the country’s most comprehensive and stringent state-level privacy law. Once effective, the new regulations will require businesses to conduct regular cybersecurity audits and risk assessments, and provide consumers with transparency and opt-out features for automated decision-making technology (ADMT).