Luxembourg Financial Regulation Intelligence
Navigate Luxembourg financial regulation with AI-powered analysis. Get cited answers on CSSF requirements, fund law obligations, MiCAR transposition, and DORA compliance for Luxembourg-based financial entities.
Luxembourg at a Glance
Supervisory model
Integrated (CSSF + CAA)
Primary legislation
Financial Sector Law 1993, UCI Law 2010
MiCAR authority
CSSF
DORA authority
CSSF
Fund assets
EUR 5+ trillion (largest EU domicile)
Languages
French, English, German, Luxembourgish
Supervisory Authorities
The competent authorities responsible for financial supervision in Luxembourg.
CSSF
Commission de Surveillance du Secteur Financier
Primary financial supervisor for banks, investment firms, fund managers, payment institutions, and CASPs. MiCAR competent authority. DORA competent authority. Responsible for both prudential and conduct-of-business supervision.
CAA
Commissariat aux Assurances
Insurance and reinsurance supervisor. Responsible for authorisation and ongoing supervision of insurance undertakings and insurance intermediaries in Luxembourg.
EU Regulations in Luxembourg
How key EU financial regulations apply in the Luxembourg jurisdiction — local competent authorities, transposition status, and national specificities.
MiCAR in Luxembourg
Transitional period — deadline 1 July 2026
The CSSF is the competent authority for MiCAR in Luxembourg. Luxembourg had already established a regulatory framework for virtual asset service providers (VASPs) through its 2004 Financial Sector Law (as amended). Existing VASPs registered with the CSSF must transition to full MiCAR authorisation by 1 July 2026. The CSSF has issued specific guidance for the MiCAR application process.
DORA in Luxembourg
Applicable since 17 January 2025
The CSSF supervises DORA compliance for Luxembourg financial entities. Given Luxembourg's role as a major fund and banking centre, DORA has significant impact — particularly for management companies, depositaries, and fund administrators that handle critical ICT operations. The CSSF previously issued Circular 20/750 on ICT risk management, which is now superseded by DORA.
AIFMD / UCITS in Luxembourg
AIFMD II transposition by 16 April 2026
Luxembourg is the largest fund centre in Europe and the second largest globally (after the US). With over EUR 5 trillion in fund assets, the AIFMD and UCITS frameworks are critical. AIFMD II must be transposed by 16 April 2026, affecting loan origination funds, liquidity management, and delegation rules for Luxembourg-domiciled managers.
CRR / CRD in Luxembourg
CRR III phased implementation from 2025
Luxembourg hosts major international banks and the European Investment Bank. The CRR applies directly, while CRD is transposed through the Financial Sector Law. CRR III / CRD VI introduce revised credit risk, market risk (FRTB), and output floor requirements, with phased implementation from 1 January 2025.
National Financial Legislation
Key Luxembourg national statutes governing financial services, beyond directly applicable EU regulations.
Law of 5 April 1993 on the Financial Sector
The foundational banking and financial services law. Establishes the licensing regime for credit institutions, investment firms, payment institutions, and other financial professionals. Implements CRD and IFD into Luxembourg law.
Scope: Credit institutions, investment firms, payment institutions, specialised PFS
Law of 17 December 2010 on UCIs (UCI Law)
Implements the UCITS Directive into Luxembourg law. Luxembourg is the largest UCITS domicile in Europe, with over EUR 5 trillion in UCITS assets. The UCI Law governs the authorisation, operation, and distribution of UCITS funds.
Scope: UCITS funds, UCITS management companies, depositaries
Law of 12 July 2013 on AIFMs (AIFM Law)
Implements AIFMD into Luxembourg law. Covers the authorisation and supervision of AIFMs and regulates alternative investment fund structures including SIFs, SICARs, and RAIFs.
Scope: AIFMs, SIFs, SICARs, RAIFs, limited partnerships
Law of 22 March 2004 on Securitisation
Luxembourg's securitisation law — establishes a flexible legal framework for securitisation vehicles. Luxembourg is a leading European domicile for securitisation transactions.
Scope: Securitisation companies, securitisation funds
Law of 6 April 2013 on Dematerialised Securities
Enables the issuance of dematerialised securities using distributed ledger technology. Positions Luxembourg as a hub for tokenised securities and DLT-based financial instruments.
Scope: Issuers of dematerialised securities, central account keepers
Ask About Luxembourg Regulation
financialregulations.eu covers both EU-level regulations and Luxembourg national legislation. Example questions:
- Who regulates financial services in Luxembourg?
- Why is Luxembourg important for fund regulation?
- How does MiCAR apply in Luxembourg?
- What DORA obligations apply to Luxembourg fund managers?
Jurisdiction Coverage
Our knowledge base covers Luxembourg national legislation and EU regulations as they apply locally. Get answers with article-level citations from the actual regulatory text.
Frequently Asked Questions
Who regulates financial services in Luxembourg?
The CSSF (Commission de Surveillance du Secteur Financier) is the primary financial supervisor in Luxembourg, responsible for banks, investment firms, fund managers, payment institutions, and CASPs. The CAA (Commissariat aux Assurances) supervises insurance and reinsurance undertakings. Luxembourg uses an integrated supervisory model where the CSSF handles both prudential and conduct-of-business supervision for most financial entities.
Why is Luxembourg important for fund regulation?
Luxembourg is the largest fund centre in Europe and the second largest globally, with over EUR 5 trillion in fund assets under management. It is the leading European domicile for UCITS funds, alternative investment funds (SIFs, SICARs, RAIFs), and securitisation vehicles. The CSSF supervises fund managers under the AIFMD (transposed via the 2013 AIFM Law) and UCITS Directive (transposed via the 2010 UCI Law). AIFMD II transposition by April 2026 will significantly impact Luxembourg-based managers.
How does MiCAR apply in Luxembourg?
The CSSF is the MiCAR competent authority in Luxembourg. Luxembourg had previously regulated virtual asset service providers (VASPs) under amendments to the Financial Sector Law of 1993. Existing CSSF-registered VASPs must obtain full MiCAR CASP authorisation by 1 July 2026. The CSSF has published guidance on the application process and conducts pre-application meetings.
What DORA obligations apply to Luxembourg fund managers?
Luxembourg-based UCITS management companies and AIFMs are in scope of DORA since 17 January 2025. They must implement ICT risk management frameworks, incident reporting procedures, digital operational resilience testing, and third-party ICT risk management. The CSSF's previous Circular 20/750 on ICT risk is superseded by DORA. Given Luxembourg's concentration of fund service providers (administrators, transfer agents, depositaries), third-party ICT risk management is particularly critical.
What is the Luxembourg RAIF?
The Reserved Alternative Investment Fund (RAIF) is a Luxembourg fund vehicle introduced by the law of 23 July 2016. RAIFs combine the flexibility of the SIF/SICAR regimes with the advantage of not requiring direct CSSF approval — instead, they must appoint an authorised AIFM. RAIFs can invest in any asset class, offer multiple compartments, and are subject to AIFMD through their manager. They have become a popular structure for private equity, real estate, and debt fund strategies.
Explore Other Jurisdictions
financialregulations.eu covers EU-level regulations and national legislation across multiple Member States.