Reg Scanner
Proactive horizon scanning across the regulators and standards bodies in your scope — new rules, consultations and guidance, assessed against your frameworks.
Monitoring agent activeWatching 9 sources across 5 jurisdictions · scope: Payments & E-money (Fintech)Last sweep 6 min ago · next within the hour
3
New since last visit
3
High relevance
9
Sources monitored
12
Regulators & bodies
Relevance:
FCA
High relevanceConsultationNew Responses by 12 Sep 2026
FCA CP26/8 — Safeguarding reforms for payments & e-money firms
Proposes moving from the current safeguarding regime to a statutory trust, with enhanced record-keeping, monthly safeguarding audits and a new monthly regulatory return for payment and e-money institutions.
FCA · UKPublished 10 Jun 2026Detected 2 h agoFCA
EBA
High relevanceGuidanceTriaged Applies 6 months after final
EBA Guidelines on ICT and security risk management — revised draft
Aligns the EBA ICT risk guidelines with the DORA RTS, clarifying expectations on ICT risk-management frameworks, asset inventories and third-party concentration.
EBA · EUPublished 04 Jun 2026Detected 8 h agoDORANIS2
OWASP
Medium relevanceStandard updateNew
OWASP Top 10 — 2026 release candidate published
New release candidate reshuffles risk categories, introduces a dedicated category for insecure use of AI/LLM components, and merges two former categories.
OWASP · IntlPublished 02 Jun 2026Detected 1 d agoISO 27001PCI DSS
PRA
High relevancePolicy statementAssessed In force 31 Mar 2027
PRA PS7/26 — Operational resilience: impact tolerances for IBS
Finalises tightened expectations on setting and evidencing impact tolerances for important business services, including a mandatory annual board attestation.
PRA · UKPublished 28 May 2026Detected 2 d agoFCAPRA
ISO/IEC
Low relevanceAmendmentNew
ISO/IEC 27001:2022 — Amendment 1 (climate-related changes)
Adds consideration of climate change to clauses 4.1 and 4.2 (context and interested parties). Minor, but affects ISMS scope documentation.
ISO/IEC · IntlPublished 20 May 2026Detected 3 d agoISO 27001
EDPB
Medium relevanceGuidanceTriaged Consultation to 30 Jun 2026
EDPB guidelines on processing personal data via AI models
Clarifies lawful basis, data-minimisation and transparency expectations where AI models process personal data, including automated decision-making safeguards.
EDPB · EUPublished 15 May 2026Detected 5 d agoGDPR
FCA
Medium relevanceDear-CEO letterDismissed
FCA Dear-CEO letter — payments firms: financial crime controls
Sets supervisory priorities on transaction monitoring, sanctions screening and SAR quality for payments and e-money firms.
FCA · UKPublished 08 May 2026Detected 1 wk agoFCA