Compliance & Ethics

The Deutsche Bundesbank's Executive Board completed its statutory consultation under section 7 (3) of the Bundesbank Act on September 16, 2026, and raised no objections to Dr Philipp Nimmermann's nomination. The outcome has been communicated to the Bundesrat. This is a governance and personnel update with no new regulatory obligations, but compliance teams should track the resulting leadership change and the pending allocation of portfolios.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning on the website swissinvestmentsa.ch, which the source material links to a prior warning from the Swiss regulator FINMA. Compliance teams should treat the domain as a suspected unauthorized or fraudulent investment operation and update screening and client-protection controls accordingly.

On September 16, 2026, the ESAs published 14 operational instructions to harmonize how major ICT-related incidents are reported under DORA and to fix recurring data quality issues. The instructions are non-binding "best efforts" guidance, but they were agreed with competent authorities and signal supervisory expectations. Compliance teams should align reporting templates and procedures now to avoid rejected, inconsistent, or duplicated submissions.

The Financial Industry Regulatory Authority (FINRA) has fined Webull $4.2 million for widespread failures in its anti-money laundering controls, identity theft prevention program and oversight of customer trade execution, citing deficiencies that persisted for years as the online brokerage rapidly expanded.

The Netherlands Authority for Consumers and Markets (ACM) has issued a draft policy rule clarifying how telecom providers must notify customers about expiring contracts, free termination rights, and cheaper rates. The rule targets loyalty penalties and sets specific requirements for timing, format, and content. Providers should assess their current communications now, as consultation closes 27 October 2026 and a final rule is expected before year-end.

ASIC Form 7051 (ASX Form 1001) is the certification notice that disclosing entities must lodge with their half yearly reports under the Corporations Act 2001. Lodgement is due within 75 days after the end of the accounting period, and late lodgement triggers fees. The document appears to be an existing form and guide (dated 2011 and 2014), not a new rule, so compliance teams should treat it as a reminder to confirm their lodgement processes.

The Board of Appeal of the European Supervisory Authorities published a signed declaration of commitment and interests from alternate member Matthias Haentjens, as required by Article 59(6) of the ESA founding regulations. The filing is routine and creates no new obligations for regulated firms. It does reinforce the independence safeguards behind the appeals process that firms may use to challenge ESA decisions.