Crypto-Assets Service Providers (CASPs) and Virtual Asset Service Providers (VASPs) News

News and Example Templates for CSSF Circulars and EU Regulations for Crypto-Assets Service Providers (CASPs) in Luxembourg.

A close-up of a hand with a pen analyzing data on colorful bar and line charts on paper.

Circular CSSF 25/893 aligns Luxembourg’s financial entities and payment providers with DORA’s new digital incident reporting framework.

Luxembourg Financial Regulatory News: Circular CSSF 25/893 establishes the reporting framework for major ICT-related incidents and cyber threats under the DORA regulation for a wide range of financial entities in Luxembourg. It details the practical requirements for classifying and reporting […]

Circular CSSF 25/893 aligns Luxembourg’s financial entities and payment providers with DORA’s new digital incident reporting framework. Read More »

A close-up image of hands holding a one dollar bill, symbolizing finance and economy.

Circular CSSF 25/892 requires financial entities in Luxembourg to provide the CSSF with an estimation of aggregated annual costs from major ICT incidents upon request

Luxembourg Financial Regulatory News: Circular CSSF 25/892, effective May 31, 2025, informs financial entities in Luxembourg that the CSSF fully applies the Joint ESAs’ Guidelines on estimating costs and losses from major ICT-related incidents under the DORA regulation. The circular

Circular CSSF 25/892 requires financial entities in Luxembourg to provide the CSSF with an estimation of aggregated annual costs from major ICT incidents upon request Read More »

rain, people, umbrellas, nature, wet, weather, thunderstorm

Circular CSSF 25/883 amends Luxembourg’s outsourcing rules to align them with the DORA regulation, avoiding duplication for financial entities.

Luxembourg Financial Regulatory News: Circular CSSF 25/883, effective April 9, 2025, amends Circular CSSF 22/806 to prevent overlapping regulations following the entry into force of DORA. For financial entities subject to DORA, the circular repeals the section on ICT outsourcing

Circular CSSF 25/883 amends Luxembourg’s outsourcing rules to align them with the DORA regulation, avoiding duplication for financial entities. Read More »

Circular CSSF 25/898 Update of Circular CSSF 07/325 on the provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services (as amended by Circulars CSSF 21/765 and CSSF 22/827)

Circular CSSF 25/882 Released, Guiding Financial Entities On DORA-Compliant Use of ICT Third-Party Services, And Reporting Requirements

Luxembourg Financial Regulatory News: Circular CSSF 25/882, effective April 9, 2025, provides practical guidance for financial entities on using ICT third-party services under DORA. It applies to a broad range of institutions, detailing requirements for contractual arrangements, professional secrecy, and

Circular CSSF 25/882 Released, Guiding Financial Entities On DORA-Compliant Use of ICT Third-Party Services, And Reporting Requirements Read More »

Circular CSSF 25/896

Circular CSSF 25/896 Mandates EBA Guidelines Related to Union and National Restrictive Measures (sanctions)

Luxembourg Financial Regulatory News: Prepare for a major change in how your firm handles sanctions. Starting December 30, 2025, the CSSF’s new Circular 25/896 will require all financial institutions in Luxembourg to follow strict European guidelines for sanctions compliance. This

Circular CSSF 25/896 Mandates EBA Guidelines Related to Union and National Restrictive Measures (sanctions) Read More »