Regulators are no longer just writing new rules. They are adjusting the settings inside existing ones, and according to RegTech firm CUBE, that shift is changing what compliance and risk teams need to watch.
In its latest fortnightly briefing, covering September 22 to October 2, 2026, CUBE identifies three developments where the detail is now doing the heavy lifting.
The first is that the parameters are moving. CUBE points to a run of changes that altered windows, fees, reporting and decision processes rather than introducing new obligations. ASIC extended MDA relief and lengthened its non-compliance notification window to 30 days, alongside extending other legislative instruments. The Bank of England consulted on payment system fees as HM Treasury considers a cap increase. The EBA consulted on a streamlined joint decision process for bank-specific prudential requirements, while also pursuing reporting cuts through its 2027 work programme. In Hong Kong, the SFC plans a 2027 consultation on simplified prospectus disclosure.
Because the underlying obligations remain, CUBE argues that parameter-level monitoring is the only reliable way to catch each change as it lands. Its Cost of Compliance Report 2025 found that 82% of surveyed firms track between 26 and 100 regulatory developments a month, with 79% saying more than a quarter require action.
Meanwhile, carriers and managing general agents are automating state cancellation and non-renewal notices at volumes approaching a thousand a month, with API integration the next step. CUBE says automation delivers most when tied to tracked, expert-reviewed requirements that still leave room for human review.
The second theme concerns AI. Supervisory attention is becoming sharper, with ESMA setting a 2027 priority on client-facing AI and tokenisation alongside continued DORA oversight. ASIC found disclosure quality improved markedly in the first statutory sustainability reports, but flagged forward-looking statements as the next area to strengthen.
CUBE notes that compliance teams are building internal agents and asking harder questions of vendors about how inputs are used and how sources can be verified. The firm argues the question is shifting from whether AI can answer to whether teams can show where the answer came from and who validated it, with audit trails and lineage now critical.
The third theme is hard deadlines. The UK FCA opened its crypto application window with a February 28, 2027 cut-off, while the CFTC is preparing customer-fund repo changes ahead of the June 2027 Treasury repo clearing deadline. Supervisors are also asking firms to look beyond the first layer, from tracing money-mule networks past initial receiving accounts to monitoring external dependencies, private credit and AI. PwC’s 2027 Global Digital Trust Insights survey found only 39% of leaders have a fully formalised cyber continuity plan. CUBE adds that firms retiring legacy regulatory tools should include regulatory intelligence in parallel running and cut-over testing.
For more insights, read the full story here.
Read the daily FinTech news
Copyright © 2026 FinTech Global
Copyright © 2026 RegTech Analyst
