ESMA

European Securities and Markets Authority

Medium Impact

ESMA compliance table: CySEC intends to comply with recommendations on supervision of cross-border investment services

Published

Aug 1, 2022

Effective

May 10, 2022

Topics

MiFID II, Cross-border investment services, Retail investor protection, Supervision, CySEC, Investment firms, Article 16 ESMA recommendations

Executive Summary

ESMA published a compliance table showing that the Cyprus Securities and Exchange Commission intends to comply with ESMA’s recommendations on supervising cross-border activities of investment firms. The recommendations apply to CySEC, not directly to firms, and cover supervision of cross-border investment services targeting retail clients under the freedom to provide services in MiFID II Article 34. ESMA records that CySEC provided an implementation plan, including a recruitment timeline, an interim resourcing solution and periodic statistics on supervisory indicators, and that CySEC intends to comply by December 2023. The underlying recommendations require CySEC to strengthen resources dedicated to authorisations, ongoing supervision and enforcement, revise its annual supervisory plan, intensify scrutiny of high and medium-high risk firms, and monitor outcomes such as complaints, host authority requests and remedial actions. For Cyprus-authorised firms passporting services into other EU Member States, the practical impact is likely increased supervisory engagement, stronger evidence requests and closer follow-up on remediation, complaints and cross-border conduct risks.

What Changed

newCySEC compliance position published

No compliance status was recorded in this compliance table before publication.

New

CySEC is listed as intending to comply with the recommendations by December 2023.

newScope limited to CySEC supervision of cross-border retail activity

The compliance table did not create a direct obligation for investment firms.

New

The supervisory expectations are addressed to CySEC as home competent authority for relevant Cyprus-authorised firms.

newResource strengthening expectation

The peer review identified resourcing issues in the relevant supervisory cycle.

New

CySEC should enlarge supervisory teams by around 30 to 40 new members and use interim solutions while recruitment is completed.

newRevised annual supervisory planning

The previous supervisory approach was considered insufficient to address risks at an earlier stage.

New

The plan should focus on high and medium-high risk firms, problematic firms and timely actions proportionate to the risks and shortcomings identified.

newImplementation plan and supervisory indicators

No implementation plan or periodic indicator reporting was captured in the compliance table before publication.

New

CySEC has provided a plan, recruitment timeline, interim solution and periodic statistics on indicators such as complaints, host NCA requests, measures and remediation oversight.

Business Impact

Who is affected

Directly affected

Cyprus Securities and Exchange Commission.

Indirectly affected

Cyprus-authorised investment firms and credit institutions providing investment services and activities cross-border to retail clients under MiFID II Article 34; host Member State competent authorities; retail clients receiving those services.

Jurisdictions

Cyprus, European Union Member States where Cyprus-authorised firms provide cross-border investment services

Business processes

Cross-border services governance, Retail client conduct-risk monitoring, Complaint handling and root-cause analysis, Regulatory engagement with CySEC and host NCAs, Remediation tracking and evidence management, Authorisation and passporting governance

Estimated effort

Medium

Compliance risk

Medium

Affected Reports

CySEC implementation plan to ESMA for the recommendationsCySEC revised annual supervisory plan for cross-border investment servicesPeriodic statistics to ESMA on complaints, host NCA requests, measures and remediation oversightFirm-level complaint monitoring and escalation control for cross-border retail clientsRemediation evidence file for CySEC follow-up reviews, including client files, third-party agreements, samples and onsite-review materials

Field	Validation rule
Compliance status	CySEC must notify ESMA whether it complies, intends to comply, or does not intend to comply with the recommendations under Article 16(3) of the ESMA Regulation.
Implementation timeline	CySEC should provide ESMA with a plan including the timeline for gradual recruitment of supervisory resources and the interim solution identified.
Supervisory resources	CySEC should increase resources directly dedicated to authorisations, ongoing supervision and enforcement of the peer-reviewed activities, with around 30 to 40 new members referenced by ESMA.
Complaints indicator	The effectiveness of CySEC’s plan should be assessed against a significant reduction in complaints, including complaints from host NCAs, other stakeholders and supervised firms.
Host NCA requests and remediation indicators	The effectiveness of CySEC’s plan should be assessed against a significant reduction in host NCA requests and effective oversight of remedial actions using CySEC’s own observations as well as auditor observations.

Recommended Actions

6 suggested next steps· derived from source analysis

1
AI generatedStep 1 of 6
Cyprus-authorised firms with MiFID II Article 34 retail activity should map affected cross-border services, target jurisdictions, client segments and responsible control owners.
2
AI generatedStep 2 of 6
Review complaint MI, host-authority correspondence and root-cause analysis to identify issues likely to attract intensified CySEC scrutiny.
3
AI generatedStep 3 of 6
Strengthen evidence packs for remediation, including client-file samples, third-party and client agreements, revised policies and proof of follow-up actions.
4
AI generatedStep 4 of 6
Reassess risk classifications for cross-border retail business, especially where conduct issues, high complaint volumes or aggressive sales behaviours exist.
5
AI generatedStep 5 of 6
Prepare regulatory engagement playbooks for CySEC reviews, onsite visits, information requests and follow-up validation of remedial actions.
6
AI generatedStep 6 of 6
Compliance and senior management should monitor CySEC communications through December 2023 and update supervisory-response plans as CySEC implements ESMA’s recommendations.

Timeline

publication

Mar 10, 2022

ESMA issued recommendations to CySEC on supervision of cross-border activities of investment firms.

effective date

May 10, 2022

The recommendations applied, and CySEC’s Article 16 notification to ESMA was due, two months after the 10 March 2022 publication date stated in the recommendations.

publication

Aug 1, 2022

ESMA published the compliance table recording that CySEC intends to comply and has provided an implementation plan, recruitment timeline, interim solution and periodic statistics.

implementation

Dec 1, 2023

CySEC stated in the compliance table that it intends to comply with the recommendations by December 2023.

Sources

AI-generated analysis is based on the following primary sources. Always verify against the official publication.

Compliance tableEuropean Securities and Markets AuthorityAug 1, 2022
Compliance table on ESMA recommendations on cross-border activities ↗
https://www.esma.europa.eu/sites/default/files/library/compliance_table_on_esma_recommendations_on_cross-border_activities.pdf
RecommendationsEuropean Securities and Markets AuthorityMar 10, 2022
Recommendations to the Cyprus Securities and Exchange Commission on the supervision of cross-border activities of investment firms ↗
https://www.esma.europa.eu/sites/default/files/library/compliance_table_on_esma_recommendations_on_cross-border_activities.pdf
Primary legal textEUR-LexMay 15, 2014
Directive 2014/65/EU on markets in financial instruments ↗
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014L0065
Primary legal textEUR-LexNov 24, 2010
Regulation (EU) No 1095/2010 establishing the European Securities and Markets Authority ↗
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010R1095

Related Evidence

Verified source support for this analysis

The evidence agent checks whether the drafted finding is supported by official publications and relevant public source material.

Receive updates like this by email

Get AI-generated analysis for the regulators and topics you care about.