Regulatory Signals & Insight

Guide

Post-Quantum Cryptography Migration for Financial Firms, Step by Step (2026)

A step-by-step plan for financial firms preparing to migrate to post-quantum cryptography, built on the NIST standards and the federal migration model, written for preparation rather than compliance.

Written by Taft Compliance Group

Article

The Coinbase Ireland Fine: Safeguarding Cannot Be Outsourced to the Parent

The Central Bank of Ireland fined Coinbase Ireland €3,252,618 for outsourcing safeguarding to its US parent. What group EMIs and payment firms should check now.

Written by Taft Compliance Group

Article

SEC FY 2027 Exam Priorities: The Private Fund Adviser's Document Request List

The SEC's FY 2027 exam priorities read like a document request list for private fund advisers: fees, credit lines, affiliates, valuation, and who gets examined first.

Written by Taft Compliance Group

Article

OCC GENIUS Act Final Rule: The Waiver Is the Only Bridge to January 18, 2027

The OCC GENIUS Act final rule takes effect January 18, 2027, yet applications open only after OMB approval. Why the waiver is the bridge and what issuers must build now.

Written by Taft Compliance Group

Article

The FCA's Good and Poor AI Practice: The Checklist UK Fintechs Now Have to Meet

The FCA has published good and poor AI practice from firm testing and said major-incident reporting covers significant AI failures. What UK fintechs should do now.

Written by Taft Compliance Group

Guide

What Did the SEC's AI-Washing Cases Actually Punish? A Guide for Firms in 2026

The SEC's settled AI-washing cases against two advisers punished statements about AI that the firms could not back up, not the use of AI itself; this guide explains the findings and how to describe AI use accurately.

Written by Taft Compliance Group

Article

Operation Economic Outcast: What the IDB Designation Means for Payments Firms

OFAC has listed Iraq's IDB, Iranian offshore banks, exchange houses and a Hong Kong company. What non-US payments firms with Gulf, Hong Kong or Türkiye flows should check now.

Written by Taft Compliance Group

Article

The CFTC Crypto ANPRM: The On-Exchange Requirement and Retail Leverage Today

The CFTC's October 2026 ANPRM on crypto asset transactions: what section 2(c)(2)(D) already requires of retail leverage, and what to do before December 14.

Written by Taft Compliance Group

Guide

AI Governance in a Box: The Ten Documents a Regulator Will Ask for in 2026

A guide to the ten documents that together form an AI governance framework for a regulated firm, what each one must show, and how to build them in an order that holds up to review.

Written by Taft Compliance Group

Article

ESMA on Non-Compliant Stablecoins: A Three-Month Clock for Every MiCA CASP

ESMA's opinion tells NCAs to end CASP services for non-MiCA-compliant stablecoins within three months. What exchanges, brokers and custodians must do now.

Written by Taft Compliance Group

Article

FINRA Drops Principal Approval for Late Adviser Allocations: What Still Applies

FINRA Regulatory Notice 26-17 removes principal approval for late adviser bulk order allocations from November 16, 2026. The anti-cherry-picking prohibition stays.

Written by Taft Compliance Group

Article

The American Express Order: Your AML Risk Assessment Must Follow the Product

The OCC's $350 million American Express order turns on one finding: a risk assessment that covered deposits and missed the card book. A self-test for fintech lenders.

Written by Taft Compliance Group

Article

ESMA's MiCA Review Response: Six Proposals That Touch a CASP's Live Products

ESMA's 30 September 2026 response to the MiCA review proposes new rules on stablecoins, DeFi access, staking, lending, costs and marketing. What CASPs should do now.

Written by Taft Compliance Group

Guide

What the SEC and FINRA Expect When Advisers Use AI in 2026

Neither regulator has written an AI rulebook: FINRA says its existing rules apply to generative AI, and the SEC has enforced the Advisers Act and the Marketing Rule against advisers whose AI claims were untrue.

Written by Taft Compliance Group

Article

The New SEC Exam Handbook: The Clock and Checklist It Hands Every Registrant

The SEC's new exam handbook writes down the exam clock and an expectations table. What smaller advisers, fund managers and broker-dealers should do this quarter.

Written by Taft Compliance Group

Article

The A7 Network Designation: Why Sanctions Screening Will Not Catch a Sub-Agent

OFAC sanctioned the A7 Network and FinCEN proposed a section 9714 special measure. The exposure sits in unnamed Sub-Agents, so name screening alone will miss it.

Written by Taft Compliance Group

Guide

The EU AI Act for Fintechs: What Is High-Risk and What Is Not (2026)

A fintech guide to the EU AI Act's four risk tiers: which lending, hiring and biometric uses are high-risk, which chatbots carry transparency duties, and the dates on which each obligation applies.

Written by Taft Compliance Group

Article

What the ESAs and the CSSF Just Told You About Your DORA Incident Reports

The ESAs' operational instructions and the CSSF's additions read as a list of common errors in DORA major incident reports. A field-by-field check of your runbook.

Written by Taft Compliance Group

Article

The Fed's GENIUS Act Proposals: What Board Supervision Costs an Issuer

The Federal Reserve's GENIUS Act proposals set capital, reserve, reporting and exam terms for Board-supervised stablecoin issuers: who is in scope and what it costs.

Written by Taft Compliance Group

Guide

What Is Quantum Compliance? Post-Quantum Readiness for Financial Firms in 2026

Quantum compliance is the governance work of finding every quantum-vulnerable public-key dependency a firm has and preparing to replace it in a documented order. In the United States the direction comes from NIST and the dates are 2030 and 2035, proposed for federal systems but already shaping private roadmaps. Supervisors in Switzerland, Hong Kong and the EU are moving faster.

Written by Taft Compliance Group

Guide

Audit Readiness Best Practices for Financial Firms

Preparation for exams and reviews: documentation, mock audits, remediation and control testing.

Written by Taft Compliance Group

Guide

Crypto Compliance Guide for Digital Assets

Frameworks for VASPs: token classification, the Travel Rule, custody and blockchain analytics in evolving regulation.

Written by Taft Compliance Group

Guide

Guide to AML Compliance for Fintechs and Funds

AML frameworks, risk assessments and sanctions screening under BSA/FinCEN/FATF; best practices for transaction monitoring and program design.

Written by Taft Compliance Group

Guide

What Is a Fractional CCO? Benefits and Implementation

Senior compliance leadership for lean teams: what a fractional CCO does, the benefits for fintechs and funds, and how to put one in place.

Written by Taft Compliance Group

Article

The Withdrawal of the SEC Proposed Cybersecurity Rule: What It Signals for Advisers

In June 2025 the SEC withdrew its proposed cybersecurity rule for registered investment advisers and funds. What the rule would have required, why it was withdrawn, and what still applies.

Written by Taft Compliance Group