Latest developments in global financial services regulations

Simon Marchand

IN BRIEF

  • Hong Kong: Guidance issued for the use of Generative AI, focusing on monitoring, risk management, and cybersecurity.
  • Singapore: Continued emphasis on AML/CFT initiatives and proposed regulatory frameworks for digital assets.
  • EU: Implementation of MiCA for crypto-asset service providers and DORA for financial firms.
  • UK: FCA conducts a survey on non-financial misconduct and updates to short selling regulations.
  • USA: Record enforcement actions by the SEC and formation of a Crypto Task Force.
  • Middle East: New regulations for fund passporting in the Gulf and enhanced cooperation between financial authorities.

Recent developments in global financial services regulations reflect the dynamic nature of compliance frameworks across regions. Regulatory bodies worldwide have introduced new guidelines and provisions to address emerging risks and innovations, particularly in areas such as artificial intelligence, anti-money laundering initiatives, and the operational resilience of financial institutions. These updates are crucial for maintaining market integrity and protecting investors, emphasizing the need for organizations to stay informed and adapt to these evolving requirements.

In the rapidly evolving landscape of global financial services, recent regulatory advancements have focused on artificial intelligence (AI), anti-money laundering (AML), and the governance of crypto assets. Regulatory authorities across key jurisdictions, including the EU, the U.S., UK, APAC, and the Middle East, have introduced significant measures aimed at enhancing compliance and addressing emerging risks. This article provides an in-depth overview of the latest developments across various regions.

Asia-Pacific Region

Hong Kong

The Securities and Futures Commission (SFC) in Hong Kong has released guidance concerning the use of generative AI by licensed corporations (LCs). This circular outlines four core principles, including robust policies for monitoring AI model lifecycles and mandatory model risk management. The aim is to mitigate risks associated with increasing cybersecurity threats and to ensure comprehensive oversight when utilizing AI technologies.

Singapore

In Singapore, the Monetary Authority of Singapore (MAS) has ramped up its focus on AML and counter-terrorism financing. The MAS published a series of assessments examining risks in various sectors and issued a consultation paper proposing a new regulatory licensing regime for digital token service providers. Furthermore, the MAS will support advancement in asset tokenization and AI deployment within financial institutions, signifying progressive steps towards enhancing digital financial landscapes.

European Union

MiCA and DORA Regulations

The European Union has introduced significant regulations such as the Markets in Crypto-Assets (MiCA) and the Digital Operational Resilience Act (DORA). MiCA, which came into effect on December 30, 2024, imposes numerous compliance obligations on crypto-asset service providers, including anti-money laundering requirements. Meanwhile, DORA, effective from January 17, 2025, mandates that financial firms establish operational resilience frameworks and comply with incident reporting protocols.

Central Bank of Ireland Initiatives

The Central Bank of Ireland (CBI) has established a dedicated Fitness and Probity Unit, focusing on the pre-approval process for senior appointments in financial firms. This initiative underscores the CBI’s commitment to ensuring high standards of fitness and probity among financial sector leaders, further reinforcing regulatory oversight in the region.

United Kingdom

FCA’s Non-Financial Misconduct Survey

The Financial Conduct Authority (FCA) has uncovered a significant rise in non-financial misconduct allegations, with a survey indicating a notable increase in reports of bullying, harassment, and discrimination. The FCA is encouraging firms to enhance their detection and reporting mechanisms, promoting a safer and more inclusive work environment.

Updates to Short Selling Regulations

Recent updates to the UK Short Selling Regulations have increased reporting thresholds for firms, reflecting an effort to streamline compliance obligations. The FCA’s modifications are part of broader regulatory reforms to foster greater transparency and market stability, establishing new guidelines for transaction reporting standards.

North America

SEC Enforcement Actions

The U.S. Securities and Exchange Commission (SEC) has marked a record number of enforcement actions in Q1 of FY 2025, emphasizing compliance with regulatory standards. The dramatic rise in actions reflects ongoing scrutiny of market practices, with a focus on financial misstatements and disclosure violations. This surge illustrates the importance regulators place on maintaining integrity within the financial sector.

Cryptocurrency Regulatory Developments

A new Crypto Task Force has been established by the SEC to formulate clearer regulatory frameworks for the burgeoning cryptocurrency market. The task force will aim to enhance disclosure requirements and ensure consumer protection, signaling the SEC’s proactive stance in regulating the digital asset landscape, which continues to evolve rapidly.

Middle East

Gulf Cooperation Council Regulation

The Gulf Cooperation Council (GCC) has initiated a regulatory framework for fund passporting, set to take effect in early 2025. This initiative aims to promote cross-border investments and cooperation among member states, thereby enhancing the accessibility and governance of investment products across the region.

UAE Financial Regulatory Advancements

The Central Bank of the UAE (CBUAE) has fortified its regulatory cooperation with Hong Kong, establishing a connection between debt capital markets to facilitate cross-border securities activities. Additionally, significant anti-money laundering measures have been enacted to combat illicit financial activities, enhancing the regional regulatory landscape.

As the regulatory environment continues to evolve globally, stakeholders must stay informed about these developments to ensure compliance and to navigate the complexities of international financial regulations. Insights derived from various jurisdictions signify a collaborative effort to address contemporary financial challenges.

For more insights on the evolving regulatory landscape, visit Kroll’s Global Regulatory Pulse.

Region Key Development
Hong Kong Guidance for using Generative AI issued by SFC to enhance cybersecurity.
Singapore MAS focuses on AML/CFT with new strategies and risk assessments.
European Union MiCA regulation applies to crypto-asset service providers and sets new compliance standards.
United Kingdom FCA survey highlights rising non-financial misconduct in financial firms.
Middle East SCA adopts fund passporting regulations to facilitate cross-border investments.
United States SEC reported a record number of enforcement actions in FY 2025.
Jersey Introduced first Deferred Prosecution Agreement to combat financial crime.
Australia ASIC emphasizes digital assets regulation for financial institutions.
Canada Revised financial crime policies to align with international standards.
Global Heightened focus on operational resilience across all financial sectors.

The financial services industry is constantly evolving, influenced by regulatory changes aimed at addressing emerging risks, enhancing consumer protection, and ensuring compliance with international norms. Recent regulatory updates highlight significant shifts across multiple regions, including advancements in artificial intelligence guidelines, anti-money laundering initiatives, and enhancements to operational resilience frameworks. This article provides an overview of the latest regulatory developments from major financial markets around the world.

Asia-Pacific

Hong Kong’s AI Guidelines

The Securities and Futures Commission (SFC) in Hong Kong has issued a circular mandating licensed corporations to adopt guidelines for the use of Generative AI. Amidst the growing reliance on artificial intelligence, these guidelines emphasize policies and controls to manage risks related to cybersecurity and third-party providers. The SFC has laid out four core principles focusing on effective internal controls, model risk management, vigilance to the cybersecurity landscape, and diligence when choosing third-party technology providers.

Singapore’s AML/CFT Initiatives

The Monetary Authority of Singapore (MAS) continues its robust focus on anti-money laundering and countering the financing of terrorism. In late 2024, the MAS published a series of resources assessing risks in various sectors, further strengthening its National Anti-Money Laundering Strategy. Furthermore, proposed regulatory frameworks for digital token service providers are being developed to support the advancement of the digital assets sector.

European Union

MiCA and DORA Regulations

The Markets in Crypto-Assets Regulation (MiCA) has been expanded to include crypto-asset service providers, cementing stringent requirements for this sector as of December 30, 2024. Additionally, the Digital Operational Resilience Act (DORA) became effective on January 17, 2025. This regulation demands financial institutions across the EU to implement stringent measures to enhance their operational resilience, including immediate incident reporting obligations.

Central Bank of Ireland’s Fitness and Probity Unit

In December 2024, the Central Bank of Ireland established a Fitness and Probity Unit to enhance oversight on the approval process for senior appointments within financial firms. This unit aims to ensure that candidates meet the necessary qualifications and uphold high standards of integrity within the financial services sector.

United Kingdom and Channel Islands

Financial Conduct Authority’s Survey

The FCA conducted a survey revealing a significant rise in non-financial misconduct allegations among financial firms between 2021 and 2023. The findings underscore the importance of improving detection and reporting processes within organizations to cultivate a safer workplace.

Updates to Operational Resilience

New rules have been outlined for Critical Third Parties (CTPs), designed to enhance operational resilience in the UK’s financial sector. The FCA and the Bank of England are scrutinizing systemic risks posed by CTPs to mitigate potential vulnerabilities that may affect financial stability.

North America

Record SEC Enforcement Actions

The U.S. Securities and Exchange Commission (SEC) has reported a record number of enforcement actions in Q1 of the 2025 fiscal year, totaling 200 actions, indicative of a proactive regulatory environment. The focus has been on addressing a wide array of issues, including financial misstatements and misleading disclosures, a situation that emphasizes the need for firms to maintain robust compliance frameworks.

Crypto Task Force Formation

With changes in administration, the SEC has established a new Crypto Task Force aimed at clarifying regulatory frameworks for the cryptocurrency sector. This initiative seeks to delineate regulatory paths and promote effective disclosure practices, representing a significant shift in regulatory focus toward digital assets.

As global financial regulations continue to evolve, staying informed of the latest updates is essential for firms to navigate and ensure compliance effectively. Resources such as KPMG’s Regulatory Insights and PwC’s take on financial services provide valuable guidance for firms adapting to this dynamic regulatory landscape.

  • Hong Kong: Guidance on Generative AI usage mandates internal controls and model risk management.
  • Singapore: Focus on AML/CFT initiatives and regulatory framework for digital token service providers.
  • European Union: New Digital Operational Resilience Act (DORA) effective, compliance demands a gap analysis from firms.
  • United Kingdom: FCA reports surge in non-financial misconduct allegations, urging firms to improve detection measures.
  • United States: SEC records a historic number of enforcement actions amid speculation of regulatory shifts.
  • Middle East: New fund passporting regulations to facilitate cross-border investments within GCC states.
  • Jersey: Implementation of the first Deferred Prosecution Agreement (DPA) judgment to enhance regulatory compliance.
  • Ireland: Establishment of a Fitness and Probity Unit to scrutinize candidate approvals in financial services.

Summary of Latest Developments in Global Financial Services Regulations

The global financial services regulatory landscape is witnessing significant evolution across various jurisdictions, impacting key areas such as artificial intelligence (AI), anti-money laundering (AML), and digital assets. Recent updates highlight the introduction of guidelines focused on AI in Hong Kong, the advancements in regulatory frameworks for digital asset providers in Singapore, and multiple enforcement actions in the United States. Regulatory authorities across regions are establishing new initiatives and emphasizing compliance to address emerging risks and enhance operational resilience.

Hong Kong: Generative AI Guidelines

As the adoption of generative AI language models (AI LMs) increases, the Securities and Futures Commission (SFC) in Hong Kong has released essential guidelines for licensed corporations (LCs). These guidelines focus on managing risks associated with AI, particularly in light of the heightened cyber threat landscape. Key recommendations include:

  • Effective Policies: Establishing robust internal controls to govern the AI model lifecycle.
  • Model Risk Management: Mandatory oversight for firms developing AI models.
  • Cybersecurity Awareness: Keeping ahead of evolving cybersecurity threats related to AI.
  • Third-Party Risks: Exercising due diligence when selecting third-party service providers.

These principles signify a proactive approach to mitigating risks associated with AI technologies.

Singapore: Advancements in AML and Digital Assets Regulation

In Singapore, the Monetary Authority of Singapore (MAS) has ramped up its focus on anti-money laundering (AML) and countering the financing of terrorism (CFT) initiatives. Recent publications include comprehensive national risk assessments aimed at various sectors, highlighting the importance of risk evaluation in financial operations. Additionally, MAS is proposing new licensing regimes for digital token service providers, marking a substantial advancement in the regulatory framework for digital assets. Key components of this initiative involve:

  • Commercial Networks: Developing supply chains to enhance liquidity for tokenized assets.
  • Market Infrastructure: Establishing frameworks for asset tokenization implementation.
  • Access Facilitation: Creating common settlement facilities for tokenized assets.

Such measures reflect a commitment to fostering innovation while ensuring regulatory compliance in developing financial technologies.

European Union: DORA and MiCA Implementation

Recent regulatory updates in the European Union characterize a substantial push towards operational resilience and comprehensive compliance obligations. The Digital Operational Resilience Act (DORA) became effective in January 2025, mandating financial firms to conduct thorough gap analyses and ensure immediate compliance with new incident reporting requirements. Furthermore, the Markets in Crypto-Assets Regulation (MiCA) has expanded its obligations to Crypto-Asset Service Providers, requiring them to adhere to prudential standards, conduct regulations, and AML guidelines.

With a transitional period granted to existing virtual asset service providers under MiCA, firms should maneuver diligently to ensure regulatory alignment.

United Kingdom: Focus on Cultural Misconduct and Financial Crime

The UK’s Financial Conduct Authority (FCA) has unveiled significant findings regarding non-financial misconduct in financial firms. With an emphasis on issues such as bullying, harassment, and discrimination, the FCA encourages firms to enhance their detection and reporting mechanisms. These actions align with broader measures intended to bolster compliance frameworks addressing financial crime.

Additionally, the FCA’s updates to the Short Selling Regulations (SSR) and ongoing enhancements in transaction reporting underscore the authority’s commitment to maintaining transparent markets and ensuring that firms adapt to evolving operational requirements.

United States: Record Enforcement Actions and Shift in Administration

The U.S. Securities and Exchange Commission (SEC) reported an unprecedented number of enforcement actions in Q1 2025, indicating a rigorous approach to regulatory compliance. These actions encompass a variety of issues, highlighting the SEC’s focus on financial misstatements, misleading disclosures, and cybersecurity breaches. With recent shifts in administration, the newly formed Crypto Task Force signals a proactive stance towards developing regulatory clarity in the digital asset space.

As firms navigate these changes, they must remain vigilant and adaptable to comply with the evolving regulatory environment.

FAQ: Latest Developments in Global Financial Services Regulations

What are the key 2025 regulatory updates across regions? The Q1 2025 Global Regulatory Pulse highlights important regulatory updates, including AI guidelines in Hong Kong, AML/CFT initiatives in Singapore, MiCA and DORA regulations in the EU, FCA’s non-financial misconduct survey in the UK, and record SEC enforcement actions in the U.S.

What guidance has the Securities and Futures Commission (SFC) issued for Generative AI in Hong Kong? The SFC has provided guidance for licensed corporations to mitigate risks associated with AI language models, focusing on effective policies, mandatory model risk management, cybersecurity threats, and third-party provider management.

What significant legal event occurred regarding the SFC’s secrecy provision in Hong Kong? For the first time, a practicing solicitor was convicted of violating the SFC’s secrecy provision, leading to a fine of HKD 25,000 for disclosing confidential information.

What recent regulatory actions have been taken by the Monetary Authority of Singapore (MAS)? The MAS has focused on anti-money laundering (AML) processes, the advancement of asset tokenization, and guidance on AI model risk management to ensure the growth of financial institutions.

What is the Digital Operational Resilience Act (DORA) in the EU? DORA became effective on January 17, 2025, applying to regulated financial services firms across the EU, focusing on compliance, incident reporting requirements, and enhanced operational resilience.

What enforcement actions have been taken by the U.S. SEC recently? The SEC announced a record number of 200 enforcement actions within the first quarter of FY 2025, addressing various issues such as financial misstatements, misleading disclosures, and fraud.

What is the purpose of the new Crypto Taskforce established by the SEC? The Crypto Taskforce aims to create clear regulatory frameworks, provide paths to registration, and ensure appropriate enforcement resources are used judiciously in the cryptocurrency area.

How is Jersey enhancing its legal framework concerning Deferred Prosecution Agreements? Jersey has issued its first DPA judgment, marking a significant step in its legal framework to combat financial crime and improve compliance and transparency within financial institutions.

What recent actions have been taken by the Dubai Financial Services Authority (DFSA)? The DFSA has conducted several enforcement actions targeting unauthorized financial activities and published thematic reviews to enhance its regulatory framework.

What are the implications of the new regulations adopted by the Securities and Commodities Authority (SCA) in the Middle East? These regulations are set to promote cooperation among Gulf Cooperation Council (GCC) member states and facilitate cross-border investments, paving the way for a more integrated financial market.

What updates have been made to the FCA culture and non-financial misconduct survey? The FCA’s survey revealed a significant rise in non-financial misconduct allegations, highlighting issues such as bullying and harassment and urging firms to improve detection and reporting mechanisms.