Payments Regulatory Deadlines to Watch in July 2025
Each month, we leverage data from our Horizon Scanning Regulatory Deadlines Calendar to bring you a glimpse of the key response deadlines and legislation effective dates coming up, so you can plan and take action around some of the most important regulatory developments unfolding right now.
In July, there are 59 regulatory deadlines on the horizon — with 10 key consultation periods coming to an end and requiring a response, and 44 actionable deadlines to be aware of coming into effect.
What are the regulatory deadlines to watch in July?
Norway
On June 26, 2025, the Norwegian government published regulations on crypto-assets. These regulations supplement the Crypto Assets Act, which implements Regulation (EU) 2023/1114 (Markets in Crypto-Assets – MiCA) in Norway. Specifically, the regulations adopt several European Commission delegated and implementing regulations:
- Commission Delegated Regulation (EU) 2025/416, providing regulatory technical standards (RTS) specifying the content and format of order book records for crypto-asset service providers operating a trading platform for crypto-assets.
- Commission Delegated Regulation (EU) 2025/417, providing RTS specifying the manner in which crypto-asset service providers operating a trading platform for crypto-assets are to present transparency data.
The regulations also amend the Financial Institutions Regulations to: mandate compliance with the requirements for a white paper, as specified in Article 51 of MiCA, and clarify that e-money tokens as defined in MiCA are to be considered electronic money pursuant to the Financial Institutions Act. The regulations enter into force on July 1, 2025.
European Union
On June 18, 2025, the European Commission published Delegated Regulation (EU) 2025/1190 in the Official Journal of the European Union. The delegated regulation, supplementing Regulation (EU) 2022/2554 (Digital Operational Resilience Act – DORA), provides the regulatory technical standards (RTS) specifying the criteria used for identifying financial entities required to perform threat-led penetration testing (TLPT), the requirements and standards governing the use of internal testers, testing methodology and approach for each phase of the testing, and more. The delegated regulation enters into force on July 8, 2025, 20 days after its publication in the Official Journal of the European Union.
Italy
The Italian parliament has adopted and officially published Law No. 91 of June 13, 2025 on the Delegation to the Government for the transposition of European directives and the implementation of other acts of the European Union. The law enters into force on July 10, 2025.
The law sets out the guidelines and principles for the Italian government to follow when exercising the delegation for the transposition of EU directives and the implementation of EU regulations, such as:
- Directive (EU) 2023/2225 on credit agreements for consumers, which covers the provision of buy now, pay later (BNPL) services.
- Directive (EU) 2023/2673 as regards financial services contracts concluded at a distance.
- Directive (EU) 2024/1640 on the mechanisms to be put in place by member states for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing.
Saudi Arabia
On June 19, 2025, the Saudi Central Bank (SAMA) issued updated rules for the issuance and operation of credit cards, superseding the previous regulatory framework. The updated rules aim to enhance disclosure and transparency, reduce the cost of credit for consumers, and improve operational practices among credit card issuers. Issuers are expected to implement the updated framework by September 17, 2025, with specific provisions on reimbursement and fees (Article 17(3) and Article 48) required by July 19, 2025.
India
The National Payments Corporation of India (NPCI) has issued a circular setting out new guidelines on the use of Application Payment Interface (APIs) in the United Payment Interface (UPI). According to the guidelines, payment service provider (PSP) banks and/or acquiring banks must ensure all API requests sent to UPI are monitored and moderated in terms of appropriate usage. The circular takes effect on July 31st 2025.
â€
The ÂÜÀòžž PaymentsCompliance Horizon Scanning tool shows you real-time updates on regulatory deadlines and trends across 140+ global jurisdictions, including all US states, at the click of a button. Its Regulatory Deadlines Calendar feature sets out effective dates for published legislation, closing dates for consultation periods on proposed regulatory developments, and deadlines for specific requests for information by regulatory authorities.
.gif)
We’ve only shown you a snapshot of July’s deadlines. Want to see them all?
â€Book a demo with a member of our team, who can show you the full Regulatory Deadlines Calendar for this month.