����žž

In recent months, the future of the US Consumer Financial Protection Bureau (CFPB) has become thoroughly uncertain. Navigating the whirlwind of political changes has been overwhelming for policy specialists and compliance experts alike, as everyone tries to piece together what to comply with, and what to prepare for.

On December 26, 2024, South Korea’s National Assembly passed the Act on the Development of Artificial Intelligence and Establishment of Trust (AI Basic Act), which establishes a structured framework for AI governance. The legislation introduces regulatory measures to oversee AI implementation, promote industrial innovation and address risks associated with the deployment of AI. A key provision of the act is the creation of a National AI Committee that’s responsible for supervising AI-related societal integration and industrial development. Additionally, the Minister of Science and ICT must develop and execute an AI Basic Plan every three years, in order to ensure a coordinated and forward-looking approach to AI policy. The law provides support for the construction of testing facilities, equipment and systems to facilitate AI validation and performance testing. AI system developers must maintain detailed documentation on safety and reliability measures, while national and local governments are encouraged to assist private sector projects in the testing and validation efforts.

The new framework for regulating crypto-assets, announced by finance minister Rachel Reeves, is intended to promote the safe use of such assets, and comes at a critical point in the industry’s evolution.

A brewing verdict from the EU’s highest court could redefine the scope of the revised Payment Services Directive (PSD2) and bring new financial actors into compliance.

New compliance burdens are being imposed on payment and banking institutions operating in the UK under legislation designed to prevent unfair debanking of individuals and small businesses.

Senator Cynthia Lummis has argued that the Federal Reserve Board continues to flout the law on master accounts and that it is continuing the Biden-era opposition to crypto.

The Parliamentary Assembly of Bosnia and Herzegovina published a new Law on Personal Data Protection in the Official Gazette of BiH No. 12/25 on February 28, 2025. The law replaces the outdated 2006 legislation and aligns Bosnia’s data protection regime with EU Regulation 2016/679 (General Data Protection Regulation - GDPR) and Directive 2016/680.

The European Banking Authority has published new draft Regulatory Technical Standards (RTS) that guide crypto-asset service providers on when they need to appoint a central contact point.

Brazilian fintech Nubank has received a licence from the National Banking and Securities Commission to transform its Mexican subsidiary, Nu Mexico, into a bank.

Crypto-asset deregulation has taken a further step in the US as the Federal Reserve Board has withdrawn guidance for banks on crypto-assets and dollar tokens.