Insights
News and articles on EU fintech topics — licensing, AML, payments, reporting for operators.
AI data quality and the GDPR accuracy principle — the Spanish DPA’s criteria for model governance
AI data quality and the GDPR accuracy principle: the AEPD's July 2026 technical note read for compliance teams running monitoring, screening and…
Modelo 172, 173 and the new modelo 175 — Spain’s crypto-asset information returns after DAC8
Modelo 172, modelo 173 and modelo 721 explained — plus the March 2026 draft order that repeals 173, creates modelo 175 and…
BSI and MIR reporting — the ECB statistical returns every euro-area MFI has to file
BSI and MIR reporting to the ECB: why an e-money institution is a monetary financial institution, what Regulation (EU) 2021/379 and (EU)…
EU AI Act deadlines after Regulation (EU) 2026/1744 — what changes for financial institutions
EU AI Act deadlines after Regulation (EU) 2026/1744: Annex III high-risk deferred to 2 December 2027, two new duties from 2 December…
DAC8 XML reporting — the data build, the schema, and how it lines up with CARF and CRS
DAC8 XML reporting for crypto-asset service providers: the four reporting lines, aggregation per user and asset type, valuation at execution, the five-year…
BaFin licence for a fintech in Germany — which authorisation you actually need
BaFin licence in Germany: which authorisation a fintech actually needs and what BaFin will license you to do under each — ZAG…
AMLA’s entity risk-scoring method — how supervisors will rate your inherent, controls and residual risk
AMLA's risk-assessment methodology under Article 40(2) of Directive (EU) 2024/1640: the 1-to-4 inherent and controls scores, the four classification bands, the residual-risk…
Comunicazioni oggettive — Italy’s monthly cash return to the UIF, and the January 2026 change
Comunicazioni oggettive in Italy: the monthly €10,000 cash return to the UIF under Article 47 of Legislative Decree 231/2007 — who files,…
ZAIT repealed: ICT risk for German payment and e-money institutions under DORA
ZAIT was repealed with expiry of 16 January 2025 and DORA took over: which articles a licensed German payment or e-money institution…
CESOP data and system readiness: the four layers a PSP has to build
CESOP data and system readiness for payment service providers: the 25-payment counting rules, home vs host member state filing, the 15 data…