On 16 September 2026, the Financial Conduct Authority (FCA) published Policy Statement 26/18: Cryptoasset Perimeter Guidance (PS26/18).
Background
From 25 October 2027, the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (the Cryptoasset Regulations) will introduce new regulated activities for cryptoassets into the FCA’s perimeter.
Anyone wishing to carry
The SEC’s proposed Regulation Crypto Assets (Reg CA) would create new exemptions for crypto-asset fundraising and a safe harbor for certain investment contracts. While the framework may expand capital-raising opportunities, issuers, platforms and investors should remain mindful of ongoing SEC, state and criminal enforcement risks.
Read the full update here.
On 2 September 2026, the Financial Conduct Authority (FCA) published a new webpage setting out insights for firms on how frontier artificial intelligence (AI) may affect cyber resilience, governance and vulnerability management for firms. The insights follow a review and summarises observations reported by firms during its engagement with the FCA.
On 7 July 2026, the European Systemic Risk Board (ESRB) issued a warning (dated 25 June 2026) on systemic cyber risks stemming from frontier artificial intelligence models (FAIMs).
Warning
The warning notes that current evidence indicates that FAIMs are capable of discovering vulnerabilities, generating working exploits and autonomously executing full-scale cyberattacks
On 4 May 2026, the Australian Securities and Investments Commission (ASIC) reminded providers of financial services involved in digital assets to decide whether they require an Australian Financial Services (AFS) licence (or variation to their existing AFS licence) by 30 June 2026. After this date, ASIC’s no-action position expires.
Key deadline
On 30 April 2026, the Australian Prudential Regulation Authority (APRA) issued a letter calling for a step-change in how banks, insurers and superannuation trustees manage AI-related risks as the technology continues to rapidly evolve. In particular, APRA warns that governance, risk management, assurance and operational resilience practices are not keeping pace with the
On 26 March 2026, the Department for Business and Trade issued a Policy Paper ‘Smart Data 2035 – The UK’s Smart Data Strategy’.
Under the Data (Use and Access) Act 2025, the government now has powers to require firms to participate in smart data schemes. The Policy Paper sets out the Government’s vision for
The Capital Market Authority (CMA) has approved amendments to the Capital Market Institutions Regulations, formally establishing the regulatory framework for robo‑advisory services in Saudi Arabia. This follows the successful pilot conducted within the CMA’s FinTech Lab and represents a shift from limited sandbox experimentation to full regulatory integration.
Robo‑advisory services may now be