It does not introduce new procedures but clarifies the existing EU GDPR framework and harmonises rules on certain elements of cross-border enforcement of the EU GDPR. The regulation laying down additional procedural rules on the enforcement of the EU GDPR came into force on 1 January. In addition, the notification deadline for breach reporting would be extended from 72 to 96 hours.
By establishing generic listing standards, exchanges can now list ETFs without filing for individual rule changes, and issuers only need to file S-1 forms for approval. Formerly, exchanges like Nasdaq, NYSE Arca, and Cboe BZX would file a 19b-4 form with the SEC to propose a change to their own rules, allowing them to list a specific crypto exchange-traded fund (ETF). The Staff noted that the no-action relief is “based on all of the facts and representations” made by the requestor, and “any different facts or circumstances might require a different conclusion.” The request letter asserted that Fuse Tokens should not be considered securities transactions requiring registration under the securities laws for multiple reasons, including the economic reality of the Fuse Tokens, no reasonable expectation of profits, and no reliance on managerial efforts. The no-action request focused on whether the Fuse Token was an “investment contract” (and thus a security) under US securities law, specifically the longstanding Howey test. The NAL “is based strictly on the facts and circumstances discussed in the Request, https://www.clubhamburg.info/learning-the-secrets-about-2 and any different facts or circumstances might require a different response.” As such, the no-action relief applies only to the “Preliminary Base Version” of the DTC’s tokenization pilot program, as described in the Request.
And you need reporting capabilities that can generate the documentation regulators require. The agency continues to focus intensely on data brokers, and with the Delete Request and Opt-Out Platform (known as DROP) now available, enforcement will likely accelerate throughout 2026. Consumers can now ask how automated systems made decisions about them, and businesses must explain. Automated decision-making technology (ADMT) requirements kick in for businesses using algorithmic systems for significant decisions affecting employment, housing, credit, healthcare, and education. Annual cybersecurity audits are now mandatory for businesses meeting certain revenue and data processing thresholds. And you must submit a breach notification report to the Attorney General within 15 calendar days of notifying individuals.
How should organizations prepare for AI regulation across multiple regions?
The Payment Services Directive 2 Regulatory Technical Standards (PSD2 RTS) lay out contractual obligations for Strong Customer Authentication (SCA) and API access. These obligations set the tone for customer relationships and spell out how services get delivered within legal boundaries. Customers have to get clear notices about information sharing, so make sure your agreements include the right consent language for FATCA reporting. It applies to payment services, investment platforms, and other financial products.
Are you ready for the August 2026 Deadline?
In the Order, the SEC found the proposals to be “consistent with the Securities Exchange Act of 1934 (the Exchange Act) and rules and regulations thereunder applicable to a national securities exchange,” including the requirement that the exchanges’ rules be designed to “prevent fraudulent and manipulative acts and practices.” The approval of these rule change requests represents a green light for spot bitcoin-based exchange traded products (ETPs) to trade on national securities exchanges for the first time in bitcoin’s 15-year history, after a decade of attempts by market participants to obtain such approval. “Accordingly, market participants must consider — and adhere to — the federal securities laws when transacting in these instruments.” Issuers, intermediaries, and traders of tokenized securities should therefore not neglect to consider the securities laws implications of their activities, including registration, disclosure, and anti-fraud rules. In the speech, Chair Atkins reflected on the history of financial and technological innovations in the US capital markets, repudiated former regulatory approaches that in his view stifled the development of blockchain innovation and digital asset technologies, and announced the SEC’s “Project Crypto.” The Staff provides no legal analysis in the NAL, but issued the NAL wholly based on the facts and analysis presented by the Foundation’s counsel in the request letter, in which the requestor asserts that the programmatic distribution of tokens for provider payments and computation payments in accordance with Network rules (collectively, Programmatic Distributions) does not satisfy the fourth prong of the Howey test.
Since then, the ICO says that it has secured improvements to the approach to children’s privacy settings by 10 platforms, including setting private profiles by default, just-in-time privacy notices and restricted visibility of child users. The ICO is focusing on uses of AI and biometrics that cause the most concern and potential for harm if misused; including, continued review of the use of automated decision-making in recruitment, use of facial recognition technology by police forces and looking at how personal data is used to train generative-AI foundation models. They must ensure that their organizations strictly comply with data protection regulations and have ironclad agreements in place when integrating AI technologies like ChatGPT into their operations. It underscores the growing importance of data protection and privacy concerns in the rapidly evolving field of artificial intelligence, particularly as governments work to establish comprehensive rules like the EU’s AI Act.
Legal Nodes can give you customized advice to help you tackle the strict rules in the UK and EU markets. Strong governance frameworks and regular compliance audits are key to minimizing risks and preventing penalties. Keeping up with fintech rules in the UK and EU takes serious attention. With international regulations, digital currency frameworks, and anti-money laundering rules on the horizon, planning is non-negotiable. Test your compliance procedures regularly to meet FCA and DORA standards, especially if you operate in more than one jurisdiction. In the UK, financial companies follow resilience rules set by the FCA PS21/3, which run alongside DORA, to keep their digital operations dependable.
§1.1 — Circular Supply Agreement StructureEstructura del Acuerdo Circular de Compra
- SEC Chairman Paul Atkins stated that the approvals are another step in the SEC’s effort “to build a rational regulatory framework for crypto.” He noted that the orders “will make these crypto products less costly and more efficient” for market participants.
- Businesses can expect significant developments to data law (including data protection) in 2026, as set out in this bumper edition of the Regulatory Outlook.
- In late December 2025, the European Commission renewed two 2021 UK adequacy decisions, permitting the continued free flow of personal data between the European Economic Area and the UK, under the EU GDPR and the Law Enforcement Directive.
- The Staff noted that the no-action relief is “based on all of the facts and representations” made by the requestor, and “any different facts or circumstances might require a different conclusion.”
- All incoming materials are purchased as manufacturing feedstock under Circular Offtake Agreements and classified as manufacturing inputs upon facility entry under US 40 CFR §241.3(b)(4) / EU Waste Framework Directive Article 5 & 6.
Into critical materials — near-zero emissions, near-zero residual. Product extraction decisions balance maximum value creation against current market demand and revenue requirements. Carbotura’s RevCon progression strategy is a systematic approach to value elevation that transforms feedstock materials into premium products through controlled refinement pathways.
March 2023: Bug Exposure
Penalties for non-compliance can be severe, possibly amounting to millions of euros, based on your operating location. Staying compliant means maintaining accurate financial records, knowing the reporting frameworks, and keeping up with the rules as they change. Your systems need to capture and organize everything efficiently so you https://autonow.net/what-is-quickbooks-consulting-and-how-does-it-help-businesses-manage-their-finances.html don’t get hit with penalties for late or incomplete reports. These organizations set the rules your business must follow to operate legally. Understanding these decrees and adhering to regulatory standards isn’t just about avoiding penalties.