A demanding and rapidly evolving regulatory environment
The regulatory framework governing payment and e-money institutions has never been more complex or more consequential. The Central Bank of Ireland's supervisory expectations have intensified significantly, and a wave of EU legislative reform is placing new obligations on every authorised firm operating in the market.
PSD3 and the Payment Services Regulation (PSR) will overhaul the framework that has governed payment services since 2018 - bringing enhanced strong customer authentication requirements, expanded open banking obligations, and tighter rules on liability and consumer protection.
At the same time, the Instant Payments Regulation is requiring firms to offer euro credit transfers in real time, with fee parity obligations and new sanctions screening requirements that challenge existing technology architectures.
The Digital Operational Resilience Act (DORA) is now in force, imposing binding requirements on ICT risk management, third-party oversight, incident reporting, and resilience testing across all financial entities and their critical service providers.
Proposed reforms to the safeguarding regime will raise the bar significantly for how payment and e-money institutions hold and reconcile client funds. And the EU's forthcoming AML Regulation, together with the establishment of the Anti-Money Laundering Authority (AMLA), will introduce harmonised, directly applicable financial crime obligations that demand immediate attention.
The cost of non-compliance is high - in enforcement, in reputational damage, and ultimately in authorisation. We will help you understand what these changes mean for your specific business model and guide you through what needs to be done.