Regulatory Frameworks & Jurisdictional Reporting
Overview
Financial institutions operating across Europe, the United Kingdom, and international markets are subject to a wide range of regulatory frameworks governing reporting, data governance, risk management, and operational resilience.
These frameworks are issued at EU, UK, or international level and are overseen by supervisory authorities such as the European Supervisory Authorities (EBA, ESMA, EIOPA), the Financial Conduct Authority (FCA), and international bodies including the OECD. While the regulatory objectives differ, firms consistently face common challenges around data quality, reporting accuracy, auditability, and supervisory transparency.
The sections below pro vide an overview of key regulatory frameworks and jurisdiction-specific reporting obligations, explaining their scope and core reporting requirements.
EU Regulatory Frameworks
Digital Operational Resilience Act (DORA)
The Digital Operational Resilience Act establishes a harmonised EU framework for managing ICT risk, reporting ICT-related incidents, overseeing ICT third-party providers, and ensuring digital operational resilience across the financial sector.
-
Applies to a broad range of EU financial entities
-
Introduces mandatory Register of Information (ROI) requirements
-
Overseen by the European Supervisory Authorities
Investment Firms Regulation & Directive (IFR / IFD)
The Investment Firms Regulation and Directive introduce a tailored prudential regime for investment firms, replacing CRR/CRD for non-bank investment entities.
-
K-factor-based capital framework
-
Periodic prudential reporting obligations
-
EBA-defined technical standards and formats
Capital Requirements Regulation & Directive (CRR / CRD)
CRR and CRD define the prudential framework for credit institutions and certain investment firms, covering capital adequacy, risk exposure, and supervisory reporting.
-
COREP and related prudential disclosures
-
Ongoing supervisory reporting requirements
-
EBA XBRL taxonomies and validations
European Single Electronic Format (ESEF)
ESEF sets the requirements for electronic reporting of annual financial reports by issuers whose securities are admitted to trading on regulated markets.
-
iXBRL-based financial reporting
-
Inline tagging of IFRS financial statements
-
ESMA-defined technical rules
Markets in Crypto-Assets Regulation (MiCA)
MiCA establishes a comprehensive regulatory framework for crypto-asset issuers and service providers operating in the EU.
-
Authorisation and disclosure requirements
-
Ongoing reporting and supervisory obligations
-
Cross-border regulatory consistency
International Tax & Information Exchange Frameworks
Common Reporting Standard (CRS / DAC2 / AEOI)
The Common Reporting Standard, developed by the OECD, provides a global framework for the automatic exchange of financial account information between tax authorities.
-
Financial account data collection
-
Annual reporting to tax authorities
-
Cross-border data consistency
Foreign Account Tax Compliance Act (FATCA)
FATCA is a US tax reporting regime requiring foreign financial institutions to report information on US account holders to the Internal Revenue Service (IRS).
-
US person identification
-
Annual account reporting
-
Intergovernmental agreement (IGA) models
Crypto-Asset Reporting Framework (CARF / DAC8)
CARF and DAC8 extend international tax transparency requirements to crypto-asset transactions and service providers.
-
Crypto-asset transaction reporting
-
Expanded scope of reportable entities
-
Alignment with OECD transparency standards
UK Regulatory Frameworks
UK Investment Firms Prudential Regime (IFPR / MIFIDPRU)
The UK IFPR framework governs the prudential requirements and reporting obligations of UK investment firms.
-
Capital and liquidity requirements
-
Regulatory reporting under FCA rules
-
Alignment with UK supervisory expectations
UK Operational Resilience Framework
The UK operational resilience regime sets expectations for identifying important business services, setting impact tolerances, and managing operational disruptions.
-
ICT and third-party resilience
-
Incident management and reporting
-
Oversight by the FCA and PRA
Supervisory Authorities Referenced
REGREP regulatory content references guidance, standards, and technical specifications issued by the following authorities:
-
European Insurance and Occupational Pensions Authority (EIOPA)
-
Organisation for Economic Co-operation and Development (OECD)
-
Selected national competent authorities (including BaFin, AMF, CONSOB, CNMV, AFM)
Links are provided for reference purposes only. REGREP is not affiliated with or endorsed by any regulatory authority.
From Regulation to Operational Implementation
While regulatory frameworks define what must be reported, financial institutions face significant challenges in how reporting is operationalised, including fragmented data sources, evolving technical standards, and increasing supervisory scrutiny.
REGREP provides regulatory reporting infrastructure designed to support the structured management, validation, and generation of supervisory-ready reporting data across multiple regulatory regimes and jurisdictions.
