Fitness And Probity Regime – Changes To PCF Roles

The European Commission's Market Integration and Supervision Package represents the most substantial EU capital markets reform since MiFID II, proposing to transfer supervisory powers to ESMA and harmonise fragmented regulatory frameworks across trading, post-trading and asset management.

The EU Retail Investment Strategy is a legislative package which introduces significant changes to the UCITS Directive and AIFMD, as well as MiFID II, the Insurance Distribution Directive and the Solvency II Directive via an omnibus directive (Omnibus Directive).

On 18 September 2026, the European Banking Authority (the EBA) published its final report on the new “Guidelines on the sound management of third-party risk regarding non-ICT services (EBA/GL/2026/09)” (the 2026 Guidelines).

The Central Bank of Ireland has published a consultation paper proposing new guidance on managing third-party risks that extends beyond traditional outsourcing to encompass partnerships, joint ventures, and fintech collaborations. The proposed framework aligns with recent European Banking Authority guidelines and DORA, introducing a lifecycle-based approach with enhanced contractual provisions and broader scope than the 2021 guidance it will replace. Financial entities now face the challenge of identifying

Ireland is home to a wide variety of financial services providers. To support both providers and their customers, there is an array of financial services legislation...

The European Banking Authority has published final Guidelines on the sound management of third-party risk regarding non-ICT services, replacing the 2019 Outsourcing Guidelines and introducing a broader regulatory framework. Financial entities will need to navigate expanded scope requirements, enhanced governance standards, and alignment with DORA while managing compliance timelines and contractual obligations.

Ireland offers a sophisticated regulatory framework for Alternative Investment Funds, with structures ranging from ICAVs and Investment Limited Partnerships to Unit Trusts and Common Contractual Funds. The jurisdiction provides flexible options for both retail and institutional investors, with distinct regulatory pathways for RIAIFs, QIAIFs, and ELTIFs, each designed to accommodate different investment strategies and liquidity profiles while maintaining robust investor protections.

The Listing Act Directive introduces significant reforms to the MiFID II research regime, allowing investment firms greater flexibility in paying for research and execution services. This briefing examines how the removal of market capitalisation thresholds restores bundling as a commercial option and establishes a new EU framework for issuer-sponsored research.

The European Commission's proposed overhaul of the SFDR regime is entering crucial trialogue negotiations, with the Irish Presidency aiming to reach agreement by year-end. While the Council and Parliament have aligned on key issues like professional investor opt-outs, significant divergences remain on exclusion criteria for Transition funds, PAI reporting requirements, and engagement strategy disclosures that will shape the future of sustainable finance regulation.

On 30 October 2025, the Governing Council of the European Central Bank (ECB) announced its decision to move to the next phase of the digital euro project.

Ireland's Budget 2027, announced on 6 October 2026, introduces a €1.3 billion personal income tax package and projects a €9.5 billion surplus while implementing significant changes to capital gains tax...

Amidst much anticipation, the Medical Devices Regulation becomes fully applicable across the EU from today, 26 May 2021.

The Government has published its Autumn 2026 Legislation Programme, identifying 32 bills for priority publication and 32 bills for priority drafting. This article explores a selection of measures likely to be of interest to businesses, spanning digital economy, strategic infrastructure, litigation reform, financial regulation, competition law, corporate structures, employment, pensions, and healthcare sectors.

Ireland has lifted its data centre connection moratorium and introduced a demanding new framework requiring developers to provide their own generation capacity, source 80% of electricity from new Irish renewables within six years, and meet strict grid stability requirements. The policy creates significant opportunities for developers who can navigate the complex intersection of grid connection, planning permission, and renewable energy procurement, though a pending legal challenge adds uncertainty to the la

Following concerns from Ireland's Transmission System Operator (EirGrid) as to overdemand and constraints on the electricity network...

On 18 September 2026, the European Banking Authority (the EBA) published its final report on the new “Guidelines on the sound management of third-party risk regarding non-ICT services (EBA/GL/2026/09)” (the 2026 Guidelines).

The European Commission has published comprehensive guidelines on AI transparency obligations under Article 50 of the EU AI Act, with enforcement beginning August 2, 2026. These guidelines establish how organizations must disclose AI systems, mark synthetic content, label deepfakes, and demonstrate compliance, with significant penalties for non-compliance reaching up to €15 million or 3% of global turnover.

The Central Bank of Ireland has published a consultation paper proposing new guidance on managing third-party risks that extends beyond traditional outsourcing to encompass partnerships, joint ventures, and fintech collaborations. The proposed framework aligns with recent European Banking Authority guidelines and DORA, introducing a lifecycle-based approach with enhanced contractual provisions and broader scope than the 2021 guidance it will replace. Financial entities now face the challenge of identifying

The EU's Cyber Resilience Act introduces mandatory cybersecurity obligations for products with digital elements placed on the EU market. Understanding the five key manufacturer obligations—from secure-by-design requirements to incident reporting deadlines—is essential for compliance with this groundbreaking regulatory framework that elevates cybersecurity from best practice to legal requirement.

Spirit Airlines' proposed $10 million sale of a massive de-identified corporate dataset to Google in its Chapter 11 bankruptcy proceedings raises fundamental questions about whether operational business data can be treated as a realisable asset in insolvency. The transaction highlights the legal tension between preserving a dataset's commercial utility and ensuring individuals cannot be identified, particularly when the data maintains referential integrity across multiple systems.