The Commission de Surveillance du Secteur Financier just clarified DORA compliance rules for non-EU entities. Here's what it means for third-country branches operating in Luxembourg.

1️⃣ National Crime Agency — Forfeiture of over $5.2M from Azerbaijan-Linked ENEX
The UK agency secured a civil forfeiture of over five million dollars after a deep probe into Azerbaijan-linked assets.
This major action directly hits global trading companies, international financial firms, and foreign investment funds.
Compliance teams must now upgrade their anti-money laundering controls to spot and report suspicious cross-border transactions.

2️⃣ Ministry of Environment — Turkey Emission Trading System Regulation
The ministry has officially set the new rules and framework for the Turkey Emission Trading System to limit industrial greenhouse gases.
This major domestic shift hits heavy industrial plants, power production firms, and carbon market traders across the country.
All affected firms must closely track their greenhouse gas outputs and prepare for upcoming carbon limits and allocation rules.

3️⃣ Bank of Russia — Revocation of LLC RNKO Digital Solutions Banking License
The Bank of Russia officially revoked the license of LLC RNKO Digital Solutions with immediate effect.
This regulatory action immediately halts all payment processing tasks, fund transfers, and corporate bank activities for clients.
The impacted firm must now enter compulsory liquidation proceedings under the direct management of a state receiver.

4️⃣ President of Turkey — Amendment of the Import Regime Decision
The president of Turkey enacted a new decision modifying custom duties and import tariff controls under Decision 11644.
This trade change directly hits foreign exporters, domestic manufacturing businesses, and local importers sourcing goods under the regime.
All trading firms must quickly recalculate their tariff costs and update import records to prevent any customs delays.

5️⃣ Commission de Surveillance du Secteur Financier — Application of DORA to Third-Country Branches in Luxembourg
The CSSF issued a formal notice confirming that the Digital Operational Resilience Act applies to third-country branch offices.
This strict compliance mandate hits all non-EU financial firms and foreign banks operating branch offices in the state.
These foreign entities must immediately align their ICT risk management systems with DORA's strict cybersecurity and reporting standards.

Full analysis in the attached RegNext Daily Europe Radar carousel.

— Elena Navarro · Managing Editor, RegNext
Daily Europe Radar · Thursday 27 Aug 2026
#EURegulation #UKRegulation #FinancialRegulation #ComplianceIntelligence