/regulation & compliance

News and resources on regulation, compliance, legal and governance issues for banks and fintechs.

Business@EBAday 2025 - Event SupplementFinextra PromotedBusiness@EBAday 2025 - Event Supplement

Join the Community

Learn, share and discuss the latest banking, payments and fintech innovations with the world’s largest fintech community.

Access unique research, content, and real-time alerts, services – free to registered members.

43,762 Members   23,201 Expert opinions

Join the community Sign in

284Reports  275Webinars

Find out more

/regulation

Expert opinions

Freddie Frith

Freddie Frith Vice President at Corlytics

Why compliance transformation needs a Target Operating Model (ToM)

This blog explores the strategic importance of Target Operating Models (TOMs) in regulatory compliance and transformational change. Many people are aware that financial institutions are currently experiencing a significant shift towards digital solutions and AI-driven regulatory compliance. However, it’s important to recognise that while technolog...

/ai /regulation RegTech

Nkahiseng Ralepeli

Nkahiseng Ralepeli VP of Product: Digital Assets at Absa Bank, CIB.

No FDIC for You: What the GENIUS Act Means for the Future of Crypto Payments

The U.S. Congress is flirting with crypto’s version of a “ChatGPT moment.” A new bipartisan bill – cheekily named the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act) – promises to catapult dollar-backed stablecoins from the fringes of online trading into the mainstream of payments. Having just cleared the Senate ...

/regulation /crypto

John Bertrand

John Bertrand MD at Tec 8 Limited

Mobile Phone Theft: A 22-Day Insurance Ordeal

Analysis and Recommendations for Premium Bank Insurance Executive Summary This case study examines a mobile phone theft incident that occurred on April 22, 2025, in London, highlighting critical deficiencies in premium bank account mobile insurance services. While the police and telecom provider resolved their portions within minutes, the bank's i...

/regulation /identity

Ben O'Brien

Ben O'Brien Managing Director at Jaywing

CP10/25: 9 areas firms must address to meet the PRA’s climate expectations

In our previous post on CP10/25, we examined how expectations around climate risk are becoming more specific and embedded. This follow-up focuses on the details, breaking down the proposals in the draft Supervisory Statement and what they mean for firms assessing their current position. Each area highlighted below reflects the level of depth and i...

/regulation

Alex Rees

Alex Rees Web Strategy at Facctum

Why Real-Time Compliance Will Define the Future of RegTech

Regulatory compliance has traditionally been a slow-moving function—reactive, rules-based, and tethered to manual review cycles. But the pace of modern finance demands a fundamental rethinking. As financial crime becomes more sophisticated and real-time transactions dominate, the compliance function must operate at the speed of risk. Legacy compl

/regulation /crime RegTech

/regulation

Research

Impact Study

NextGen retail banking: A roadmap to successful modernisation

Learn why retail banks must transition to modern, composable, future-ready infrastructures today – and how they can devise journeys that are tailored as well as cost-effective. A significant portion of the retail banking landscape still relies on legacy systems, some of which can be costly and hamper innovation. According to a report from the Financial Conduct Authority (FCA), 58% of the UK’s financial services firms use legacy infrastructure for some operations, while 33% depend on it for most of their activities. In North America, the picture is similar, with around 40% of US banks still using the Common Business-Oriented Language (COBOL) – a coding language dating back to 1959. Some surveys indicate that up to 70% of bank IT budgets are spent on maintaining these legacy systems.   Today, with rapidly evolving consumer demands, technological advancements, stiff competition, and regulatory upheaval, outdated infrastructures are no longer tenable – and risk negatively impacting banks’ efficiency, agility, and customer experiences. So, how can retail banks modernise, while controlling costs and ensuring minimal impact on day-to-day business applications?   This Finextra impact study, produced in association with Oracle, analyses:  The key challenges of legacy banking systems  How to draw up a tailored roadmap for modernisation  How to quantify progress and measure success 

23 downloads

Impact Study

Why DevSecOps is key to navigating innovation and compliance

Explore how DevSecOps enable organisations to navigate economic uncertainties while treating innovation and compliance as complementary forces rather than competing priorities. A balancing act is underway within the financial services industry. Driven by client demand and fintech competition, institutions are increasingly obliged to innovate, while at the same time, ensure every step forward is secure and compliant. Often, it feels as though these two goals sit on either side of a seesaw – when one goes up, the other must go down. Many such challenges are born from the software delivery process, where countless organisations are struggling to source the expertise and capabilities necessary to deliver secure and compliant applications, at speed.  Much of the conflict stems from fragmented DevSecOps (a software development practice that integrates security throughout the development lifecycle) strategies which are built upon outdated infrastructure. Indeed, many financial institutions (FIs) today operate with disjointed security and development workflows – sometimes patching together between five to 10 separate tools that were implemented incrementally over time. While this approach worked five years ago, better options exist today. A simplified stack is conducive to both innovation and compliance – without either being compromised.  This Finextra impact study, produced in association with GitLab, explores:  How the evolution to a unified software delivery platform can deliver on both innovation and compliance;  reduce the risk of security incidents;  supercharge operational efficiencies;  amplify business agility and scalability;  and even support talent acquisition. 

119 downloads

Survey

Navigating the Nordic financial landscape: 2025 challenges and priorities

As the Nordic financial sector faces new hurdles and opportunities, a variety of issues are front and centre for financial institutions, technology providers, and fintechs.  Our latest survey of 150 responses reveals how Nordic institutions across Denmark, Finland, Iceland, Norway, and Sweden are navigating the current landscape and their strategic priorities for 2025. Providing valuable insights into areas such as the Digital Operational Resilience Act (DORA), Verification of Payee (VoP), AI’s growing role in financial services, perspectives on central bank digital currency (CBDC) and stablecoin, and evolving payment trends such as Account-to-Account (A2A) and instant payments.  Analysis of our survey responses provides a comprehensive overview on how Nordic institutions are navigating transformation shaped by innovation, regulation, and evolving customer expectations, with progress and priorities varying by country.  We explore regional specific views towards:  Key priorities for 2025  Readiness for Verification of Payee (VoP)  Strategic AI integration for real impact  The rise of A2A, instant, and mobile payments  Attitudes towards central bank digital currencies (CBDCs) and stablecoin  The impact of DORA 

285 downloads

/regulation

FinextraTV

Modern Banks Must Adapt to be More 'Phygital'

Describing the evolution of modern banking, Sovan Shatpathy, SVP, Product Management & Development, Oracle Financial Services joined the FinextraTV virtual studio to explain how banks can thrive. As well as contextualising the current landscape and offering insights into the way that banks are now focussing more intently on the customer journey, Shatpathy asserts that all banks cannot be physical or digital, they must be 'phygital'.

/regulation

Long reads

Chris Holmes

Chris Holmes Peer at House of Lords

Will the Property (Digital Assets) Bill place the UK as a leader in cryptoassets?

The Property (Digital Assets etc.) Bill passed 3rd Reading in the House of Lords on 8 May 2025 and will now move to the House of Commons to go through its legislative stages there. It has been a privilege to serve on the Special Public Bill Committee for this important legal change developed by the Law Commission of England and Wales. This legal c...

Madhvi Sonia

Madhvi Sonia Head of Content at Finextra

How will new regulation impact US payments innovation?

This is an excerpt from The Future of US Digital Payments 2025: ACH & Beyond. While rules and regulations are the bedrock of financial services and payments, organisations across the US digital payments landscape must prioritise innovation, transaction quality, opportunity and financial reward at the same time as compliance in order to remain ...

Chris Holmes

Chris Holmes Peer at House of Lords

FCA’s 5 year strategy: The UK’s shifting approach to digital assets and tokenisation

The UK needs to get serious about DeFi, digital assets, stablecoins, crypto, RWAs, tokenisation and the kind of compliance that supports innovation and protects consumers. Hopefully the days of politicians confusing bitcoin with blockchain are well behind us and there is now a greater appreciation of the potential of this technology, which is broad...