The financial services sector is set to navigate an array of critical regulatory milestones in 2025. To help industry professionals stay ahead, here is an overview of the most significant deadlines across global markets.

January 2025

EU: Instant Payments Requirements part 1 – 9 January

By 9 October 2025, banks across the Eurozone must support the reception of instant payments. Additionally, if they offer the service of sending instant payments, they must charge no more for instant payments than they charge for regular payments.

EU: Digital Operational Resilience Act (DORA) – 17 January

DORA, designed to enhance operational resilience across the EU’s financial sector, officially applies from 17 January 2025. Covering governance, third-party risk, resilience testing, incident reporting, and information sharing, institutions must comply with the Act, which came into force in January 2023.

February 2025

EU: AI Act Provisions – 2 February

From this date, provisions under the EU AI Act relating to prohibited AI systems become enforceable. These regulations target AI systems deemed to pose "unacceptable risk," restricting their market entry and use.

March 2025

UK: PS21/3 Transition Period Ends – 31 March

Issued by the Bank of England, FCA, and PRA, PS21/3 ensures operational resilience in the UK’s financial sector. Institutions must complete their transition by 31 March 2025, following the policy’s enforcement in March 2022.

July 2025

Australia: CPS 230 – 1 July

The Australian Prudential Regulation Authority (APRA) will enforce CPS 230 from 1 July 2025. This framework aims to strengthen operational risk management across banking, insurance, and superannuation sectors, following a deferral from its original January 2024 deadline.

UK: Basel 3.1 Implementation – 1 July

The Basel 3.1 framework, developed post-2007–2009 financial crisis, will be implemented in the UK from 1 July 2025. This framework enhances regulation and risk management for banks and was delayed from January 2025 by the Prudential Regulation Authority.

US: Section 1071 (Dodd-Frank Act) Deadline for Tier 1 Banks – 18 July

Under Section 1071 of the Dodd-Frank Act, Tier 1 institutions must begin reporting lending data to women-owned, minority-owned, and small businesses by 18 July 2025.

August 2025

EU: Second Round of AI Act Provisions – 2 August

On this date, additional provisions of the EU AI Act become applicable. These include requirements for notified bodies, governance frameworks, confidentiality, and penalties for non-compliance.

September 2025

EU: MiFID II Amendments Deadline – 29 September

The revised MiFID II/MiFIR framework, which took effect in March 2024, includes a transposition deadline of 29 September 2025 for amendments aimed at improving transparency and market efficiency.

October 2025

EU: Instant Payments Requirements phase 2 – 9 October

By 9 October 2025, banks across the Eurozone must support the service of sending instant payments. Additionally, Verification Of Payee will become mandatory across member states.

November 2025

Global: End of Swift’s MT/ISO 20022 CBPR+ Coexistence – November

The coexistence period for MT and ISO 20022 CBPR+ formats ends in November 2025. After this date, cross-border payment instructions must conform to the ISO 20022 standard, or they risk rejection.

December 2025

EU: Benchmark Regulation (BMR) Third-Country Regime – 31 December

Following the LIBOR scandal, the EU’s Benchmark Regulation (BMR) was introduced to enhance benchmark integrity. From 31 December 2025, provisions related to third-country benchmarks will come into force.

Staying on top of these regulatory changes is crucial for maintaining compliance and minimising operational risk. Financial institutions should prepare thoroughly to navigate these global regulatory shifts in 2025.