Insurance — regulation across countries

Regulator	Country	Official site
GDTI General Directorate of Takaful and Insurance	Afghanistan	source
AFSA Financial Supervisory Authority (Autoriteti i Mbikëqyrjes Financiare)	Albania	source
AFA Autoritat Financera Andorrana	Andorra	source
UIFAND Unitat d'Intel·ligència Financera d'Andorra	Andorra	source
ARSEG Agência Angolana de Regulação e Supervisão de Seguros	Angola	source
SSN Superintendencia de Seguros de la Nación	Argentina	source
CBA Central Bank of Armenia	Armenia	source
APRA Australian Prudential Regulation Authority	Australia	source
ASIC Australian Securities and Investments Commission	Australia	source
DFAT Department of Foreign Affairs and Trade	Australia	source
OAIC Office of the Australian Information Commissioner	Australia	source
FMA Finanzmarktaufsichtsbehörde (Financial Market Authority Austria)	Austria	source
CBAR Central Bank of the Republic of Azerbaijan	Azerbaijan	source
ICB Insurance Commission of The Bahamas	Bahamas	source
CBB Central Bank of Bahrain	Bahrain	source
BFIU Bangladesh Financial Intelligence Unit	Bangladesh	source
IDRA Insurance Development and Regulatory Authority	Bangladesh	source
FSC Financial Services Commission	Barbados	source
NBB Nationale Bank van België / Banque nationale de Belgique (National Bank of Belgium)	Belgium	source
RMA Royal Monetary Authority of Bhutan	Bhutan	source
AZORS Insurance Agency of Republika Srpska (Agencija za osiguranje Republike Srpske)	Bosnia and Herzegovina	source
NBFIRA Non-Bank Financial Institutions Regulatory Authority	Botswana	source
ANPD Autoridade Nacional de Proteção de Dados	Brazil	source
SUSEP Superintendência de Seguros Privados	Brazil	source
PREVIC Superintendência Nacional de Previdência Complementar	Brazil	source
BDCB Brunei Darussalam Central Bank	Brunei	source
FSC Комисия за финансов надзор (Financial Supervision Commission)	Bulgaria	source
CIMA Conférence Interafricaine des Marchés d'Assurance (Inter-African Conference on Insurance Markets)	Burkina Faso	source
ARCA Agence de Régulation et de Contrôle des Assurances (Insurance Regulation and Supervision Agency)	Burundi	source
UIF Unidade de Informação Financeira	Cabo Verde	—
IRC Insurance Regulator of Cambodia	Cambodia	source
ANTIC Agence Nationale des Technologies de l'Information et de la Communication (National Agency for Information and Communication Technologies)	Cameroon	source
AMF Autorité des marchés financiers (Quebec)	Canada	source
OPC Office of the Privacy Commissioner of Canada	Canada	source
OSFI Office of the Superintendent of Financial Institutions	Canada	source
CIMA Conférence Interafricaine des Marchés d'Assurances (Commission Régionale de Contrôle des Assurances)	Central African Republic	source
CIMA Conférence Interafricaine des Marchés d'Assurances — Commission Régionale de Contrôle des Assurances	Chad	source
CMF Comisión para el Mercado Financiero	Chile	source
UAF Unidad de Análisis Financiero	Chile	source
CAMLMAC China Anti-Money Laundering Monitoring and Analysis Centre	China	source
NFRA National Financial Regulatory Administration	China	source
Superintendencia Financiera de Colombia Superintendencia Financiera de Colombia	Colombia	source
SUPEN Superintendencia de Pensiones	Costa Rica	source
SUGESE Superintendencia General de Seguros	Costa Rica	source
Hanfa Hrvatska agencija za nadzor financijskih usluga (Croatian Financial Services Supervisory Agency)	Croatia	source
AMLO Ured za sprječavanje pranja novca (Anti-Money Laundering Office)	Croatia	source
ČNB Česká národní banka (Czech National Bank)	Czechia	source
ARCA Autorité de Régulation et de Contrôle des Assurances	Democratic Republic of the Congo	source
FSU Financial Services Unit	Dominica	source
JPRFM Junta de Política y Regulación Financiera y Monetaria	Ecuador	source
SCVS Superintendencia de Compañías, Valores y Seguros	Ecuador	source
UAFE Unidad de Análisis Financiero y Económico	Ecuador	source
EMLCU Egyptian Money Laundering and Terrorist Financing Combating Unit	Egypt	source
FRA Financial Regulatory Authority	Egypt	source
SSF Superintendencia del Sistema Financiero	El Salvador	source
UIF Unidad de Investigación Financiera	El Salvador	source
ANIF Agencia Nacional de Investigación Financiera (National Agency for Financial Investigation)	Equatorial Guinea	source
CIMA Conférence Interafricaine des Marchés d'Assurances (CIMA) — Commission Régionale de Contrôle des Assurances (CRCA)	Equatorial Guinea	source
Finantsinspektsioon (Estonian Financial Supervision and Resolution Authority) Finantsinspektsioon (Estonian Financial Supervision and Resolution Authority)	Estonia	source
FSRA Financial Services Regulatory Authority	Eswatini	source
NBE National Bank of Ethiopia	Ethiopia	source
RBF Reserve Bank of Fiji	Fiji	source
FIN-FSA Finanssivalvonta (Financial Supervisory Authority)	Finland	source
ACPR Autorité de contrôle prudentiel et de résolution	France	source
CNIL Commission nationale de l'informatique et des libertés	France	source
TRACFIN Traitement du renseignement et action contre les circuits financiers clandestins	France	source
CBG Central Bank of The Gambia	Gambia	source
Insurance State Supervision Service of Georgia Insurance State Supervision Service of Georgia	Georgia	source
BfDI Federal Commissioner for Data Protection and Freedom of Information	Germany	source
BaFin Federal Financial Supervisory Authority	Germany	source
NPRA National Pensions Regulatory Authority	Ghana	source
Bank of Greece Bank of Greece	Greece	source
CIMA Conférence Interafricaine des Marchés d'Assurances (Inter-African Conference on Insurance Markets)	Guinea-Bissau	source
BoG Bank of Guyana	Guyana	source
UIF Unidad de Inteligencia Financiera	Honduras	source
IA Insurance Authority	Hong Kong	source
JFIU Joint Financial Intelligence Unit	Hong Kong	source
PCPD Privacy Commissioner for Personal Data	Hong Kong	source
MNB Magyar Nemzeti Bank (Central Bank of Hungary)	Hungary	source
Seðlabanki Íslands (Central Bank of Iceland) Seðlabanki Íslands (Central Bank of Iceland)	Iceland	source
DPBI Data Protection Board of India	India	source
IRDAI Insurance Regulatory and Development Authority of India	India	source
IFSCA International Financial Services Centres Authority	India	source
PFRDA Pension Fund Regulatory and Development Authority	India	source
Insurance Diwan (ديوان التأمين) Insurance Diwan (ديوان التأمين)	Iraq	source
CBI Central Bank of Ireland	Ireland	source
DPC Data Protection Commission	Ireland	source
FSPO Financial Services and Pensions Ombudsman	Ireland	source
COVIP Commissione di vigilanza sui fondi pensione	Italy	source
IVASS Istituto per la vigilanza sulle assicurazioni	Italy	source
FSC Financial Services Commission	Jamaica	source
FSA Financial Services Agency	Japan	source
PPC Personal Information Protection Commission	Japan	source
CBJ Central Bank of Jordan	Jordan	source
ARDFM Agency for Regulation and Development of the Financial Market	Kazakhstan	source
FRC Financial Reporting Centre	Kenya	source
IRA Insurance Regulatory Authority	Kenya	source
CBK Central Bank of the Republic of Kosovo (Banka Qendrore e Republikës së Kosovës)	Kosovo	source
IRU Insurance Regulatory Unit	Kuwait	source
Financial Market Regulation and Supervision Service under the Ministry of Economy and Commerce of the Kyrgyz Republic Financial Market Regulation and Supervision Service under the Ministry of Economy and Commerce of the Kyrgyz Republic	Kyrgyzstan	source

Law or regulation	Type	Country	Year	Source
Law No. 52/2014 on the Activity of Insurance and Reinsurance	Act	Albania	2014	source
Decret 76/2022, del 2 de març, d'aprovació del Reglament de la Llei 14/2017 (Decree 76/2022 approving the Regulation of Law 14/2017)	Regulation	Andorra	2022	source
Llei 12/2017, del 22 de juny, d'ordenació i supervisió d'assegurances i reassegurances del Principat d'Andorra (Law 12/2017 on the regulation and supervision of insurance and reinsurance)	Act	Andorra	2017	source
Llei 14/2017, del 22 de juny, de prevenció i lluita contra el blanqueig de diners o valors i el finançament del terrorisme (Law 14/2017 on the prevention and fight against money laundering and terrorist financing)	Act	Andorra	2017	source
Llei de regulació del règim disciplinari del sistema financer, del 27 de novembre de 1997 - text refós (Law regulating the disciplinary regime of the financial system, consolidated text)	Act	Andorra	1997	source
Money Laundering & the Financing of Terrorism Guidelines for Financial Institutions (Amendment, 4 March 2025)	Guideline	Antigua and Barbuda	2025	source
The Financial Services Regulatory Commission Act, 2013 (No. 5 of 2013)	Act	Antigua and Barbuda	2013	source
The Insurance Act, 2007 (No. 13 of 2007)	Act	Antigua and Barbuda	2007	source
Money Laundering (Prevention) Regulations 2007 (SI No. 38 of 2007), as amended	Regulation	Antigua and Barbuda	2007	source
Ley 25.246 de Encubrimiento y Lavado de Activos (Law 25,246 on Concealment and Money Laundering)	Act	Argentina	2000	source
Ley 20.091 de Entidades de Seguros y su Control (Law 20,091 on Insurance Entities and their Supervision)	Act	Argentina	1973	source
Law on Introducing Uniform System of Financial Regulation and Supervision (HO-242-N)	Act	Armenia	2005	source
CPS 230 Operational Risk Management	Direction	Australia	2026	source
Financial Accountability Regime Act 2023	Act	Australia	2023	source
CPG 229 Climate Change Financial Risks	Guideline	Australia	2021	source
CPS 234 Information Security	Direction	Australia	2019	source
Australian Securities and Investments Commission Act 2001	Act	Australia	2001	source
Privacy Act 1988	Act	Australia	1988	source
FMA Guide for Managing Sustainability Risks (01/2025)	Guideline	Austria	2025	source
Bundesgesetz über das Wirksamwerden der Verordnung (EU) 2022/2554 über die digitale operationale Resilienz im Finanzsektor (DORA-Vollzugsgesetz – DORA-VG) (DORA Enforcement Act)	Act	Austria	2024	source
Bundesgesetz über den Betrieb und die Beaufsichtigung der Vertragsversicherung (Versicherungsaufsichtsgesetz 2016 – VAG 2016)	Act	Austria	2016	source
Bundesgesetz zur Verhinderung der Geldwäscherei und Terrorismusfinanzierung im Finanzmarkt (Finanzmarkt-Geldwäschegesetz – FM-GwG) (Federal Act on the Prevention of Money Laundering and Terrorist Financing in Financial Markets)	Act	Austria	2016	source
Finanzmarktaufsichtsbehördengesetz (FMABG) (Federal Act on the establishment and organisation of the Financial Market Authority)	Act	Austria	2001	source
Azərbaycan Respublikasının Mərkəzi Bankı haqqında Qanun (Law on the Central Bank of the Republic of Azerbaijan)	Act	Azerbaijan	2004	source
Insurance Act, 2005 (Chapter 347)	Act	Bahamas	2005	source
CBB Rulebook Volume 3 - Insurance	Rule	Bahrain	—	source
Money Laundering Prevention Act, 2012 (Act No. 5 of 2012)	Act	Bangladesh	2012	source
Insurance Act, 2010 (Act No. XIII of 2010)	Act	Bangladesh	2010	source
বীমা উন্নয়ন ও নিয়ন্ত্রণ কর্তৃপক্ষ আইন, ২০১০ (Insurance Development and Regulatory Authority Act, 2010)	Act	Bangladesh	2010	source
Proposed ESG Guidelines for the Non-Bank Financial Services Sector (External ESG Consultation Paper)	Guideline	Barbados	2026	source
Technology and Cyber Risk Management Guideline (Financial Services Commission)	Guideline	Barbados	2024	source
Money Laundering and Financing of Terrorism (Prevention and Control) Act, 2011-23	Act	Barbados	2011	source
Financial Services Commission Act, 2010-21	Act	Barbados	2010	source
Insurance Act, Cap. 310	Act	Barbados	—	source
Occupational Pension Benefits Act, Cap. 350B	Act	Barbados	—	source
Указ Президента Республики Беларусь от 18 марта 2025 г. № 108 «О страховании» (Decree of the President No. 108 of 18 March 2025 on insurance)	Act	Belarus	2025	source
Law of 18 September 2017 on the prevention of money laundering and terrorist financing and on the restriction of the use of cash	Act	Belgium	2017	source
Act of 13 March 2016 on the legal status and supervision of insurance and reinsurance companies (Insurance Supervision Act)	Act	Belgium	2016	source
Ley de Seguro de Fianzas para Entidades y Empresas Públicas y Fondo de Protección al Asegurado, Ley N° 365 (Law 365 on surety insurance for public entities and the Insured Protection Fund)	Act	Bolivia	2013	source
Pravilnik o postupku procjene rizika od pranja novca i finansiranja terorističkih aktivnosti (Rulebook on the Procedure for Assessing Money Laundering and Terrorist Financing Risk)	Regulation	Bosnia and Herzegovina	2024	source
Zakon o društvima za osiguranje (Law on Insurance Companies of Republika Srpska)	Act	Bosnia and Herzegovina	2005	source
Resolução Susep nº 99, de 24 de setembro de 2026 (SUSEP Resolution 99 on AML/CFT/proliferation financing policies, procedures and internal controls)	Regulation	Brazil	2026	source
Circular SUSEP nº 638, de 27 de julho de 2021 (SUSEP Circular 638 on cyber security requirements for supervised insurance entities)	Circular	Brazil	2021	source
Circular SUSEP nº 612, de 18 de agosto de 2020 (SUSEP Circular 612 on AML/CFT policies, procedures and internal controls)	Circular	Brazil	2020	source
Lei nº 13.810, de 8 de março de 2019 (Law 13,810/2019 on compliance with UN Security Council sanctions and asset freezing)	Act	Brazil	2019	source
Lei Geral de Proteção de Dados (LGPD), Law No. 13,709/2018	Act	Brazil	2018	source
Lei Complementar nº 109, de 29 de maio de 2001 (Complementary Law 109/2001 on the Supplementary Pension Regime)	Act	Brazil	2001	source
Decreto-Lei nº 73, de 21 de novembro de 1966 (Decree-Law 73/1966 on the National Private Insurance System)	Act	Brazil	1966	source
Notice on Early Detection of Cyber Intrusion and Incident Reporting for Financial Institutions (FTU/N-1/2017/1, Amendment No. 2)	Notification	Brunei	2017	source
Закон за Комисията за финансов надзор (Financial Supervision Commission Act)	Act	Bulgaria	2003	source
Code des assurances de la CIMA (CIMA Insurance Code)	Act	Burkina Faso	—	source
Decreto-Lei n.º 9/2012, de 20 de março — Organização, competências e funcionamento da Unidade de Informação Financeira (Decree-Law 9/2012 on the organisation, powers and operation of the Financial Intelligence Unit)	Act	Cabo Verde	2012	source
Décret N°2012/1643/PM du 14 juin 2012 fixant les conditions d'audit de la sécurité obligatoire des réseaux de communication électronique et des systèmes d'information (Decree on mandatory security audits of electronic communication networks and information systems)	Regulation	Cameroon	2012	source
Code des assurances des États membres de la CIMA (Insurance Code of the CIMA member states)	Act	Cameroon	—	source
Life Insurance Capital Adequacy Test - Guideline (2025)	Guideline	Canada	2025	source
Climate Risk Management (Guideline B-15)	Guideline	Canada	2025	source
OSFI Guideline B-10 — Third-Party Risk Management	Guideline	Canada	2023	source
OSFI Guideline B-13 — Technology and Cyber Risk Management	Guideline	Canada	2022	source
Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations	Regulation	Canada	2002	source
Proceeds of Crime (Money Laundering) and Terrorist Financing Suspicious Transaction Reporting Regulations	Regulation	Canada	2001	source
Personal Information Protection and Electronic Documents Act (PIPEDA)	Act	Canada	2000	source
Insurance Companies Act	Act	Canada	1991	source
Code des assurances des États membres de la CIMA (Insurance Code of the CIMA member states)	Act	Chad	—	source
Circular N° 62 de la UAF, que imparte instrucciones de carácter general a las personas señaladas en el artículo 3, inciso primero, de la Ley N° 19.913	Circular	Chile	2025	source
Norma de Carácter General N° 519 de la CMF, que modifica las Normas de Carácter General N° 30 y 461 referidas a la memoria anual integrada (integrated annual report: NIIF S1 and S2)	Rule	Chile	2024	source
Norma de Carácter General N° 461 de la CMF, que modifica la estructura y contenido de la memoria anual de los emisores de valores y modifica y deroga normas que indica (annual report: sustainability and corporate governance)	Rule	Chile	2021	source
Decreto Ley N° 3.538, que crea la Comisión para el Mercado Financiero	Act	Chile	1980	source
银行保险机构数据安全管理办法（金规〔2024〕24号） (Data Security Management Measures for Banking and Insurance Institutions)	Regulation	China	2024	source
Personal Information Protection Law (PIPL)	Act	China	2021	source
Anti-Money Laundering Law of the PRC	Act	China	2006	source
Zakon o provedbi Uredbe (EU) 2022/2554 o digitalnoj operativnoj otpornosti za financijski sektor (Act implementing Regulation (EU) 2022/2554 on digital operational resilience for the financial sector)	Act	Croatia	2024	source
Pravilnik o obavještavanju Ureda za sprječavanje pranja novca o sumnjivim transakcijama, sredstvima i osobama (Rulebook on notifying the Anti-Money Laundering Office of suspicious transactions, funds and persons)	Regulation	Croatia	2019	source
Pravilnik o obavještavanju Ureda za sprječavanje pranja novca o gotovinskim transakcijama u vrijednosti od 10.000,00 eura i većoj (Rulebook on notifying the Anti-Money Laundering Office of cash transactions of EUR 10,000 and above)	Regulation	Croatia	2019	source
Zakon o sprječavanju pranja novca i financiranja terorizma (Anti-Money Laundering and Terrorist Financing Act)	Act	Croatia	2017	source
Insurance Act (Zakon o osiguranju)	Act	Croatia	2015	source
Act on the Croatian Financial Services Supervisory Agency (Zakon o Hrvatskoj agenciji za nadzor financijskih usluga)	Act	Croatia	2005	source
Insurance and Reinsurance Business and Other Related Matters Law of 2016 (Ο περί Ασφαλιστικών και Αντασφαλιστικών Εργασιών και Άλλων Συναφών Θεμάτων Νόμος του 2016, 38(I)/2016)	Act	Cyprus	2016	source
Prevention and Suppression of Money Laundering Activities Law of 2007 (Ο περί της Παρεμπόδισης και Καταπολέμησης της Νομιμοποίησης Εσόδων από Παράνομες Δραστηριότητες Νόμος του 2007, 188(I)/2007)	Act	Cyprus	2007	source
Bekendtgørelse af lov om forsikringsvirksomhed i tværgående pensionskasser, livsforsikringsselskaber og skadesforsikringsselskaber m.v., LBK nr. 461 af 26. april 2026 (Consolidated Insurance Business Act)	Act	Denmark	2026	source
Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)	Regulation	Denmark	2022	source
Loi n°161/AN/12/6ème L du 9 juin 2012 portant réglementation applicable aux entreprises d'assurance (Law 161/AN/12/6th L of 9 June 2012 on the Rules Applicable to Insurance Companies)	Act	Djibouti	2012	source
Anti-Money Laundering and Suppression of Terrorist Financing Code of Practice, 2014 (S.R.O. 10 of 2014)	Regulation	Dominica	2014	source
Money Laundering (Prevention) Regulations, 2013 (S.R.O. 4 of 2013)	Regulation	Dominica	2013	source
Insurance Act, 2012 (Act No. 4 of 2012)	Act	Dominica	2012	source
Ley No. 155-17 contra el Lavado de Activos y el Financiamiento del Terrorismo (Law 155-17 against Money Laundering and the Financing of Terrorism)	Act	Dominican Republic	2017	source
Decreto No. 408-17, Reglamento de Aplicación de la Ley No. 155-17 contra el Lavado de Activos, el Financiamiento del Terrorismo y la Proliferación de Armas de Destrucción Masiva (Decree 408-17, Implementing Regulation of Law 155-17)	Regulation	Dominican Republic	2017	source
Ley 87-01 que crea el Sistema Dominicano de Seguridad Social (Law 87-01 creating the Dominican Social Security System)	Act	Dominican Republic	2001	source
FRA Board Decision No. 69 of 2023 requiring insurers to provide the technology infrastructure to link their databases with the FRA	Regulation	Egypt	2023	source
FRA Board Decision No. 107 of 2021 on disclosure of ESG practices and climate-related financial impacts by non-bank financial companies (as amended December 2022)	Regulation	Egypt	2021	source
FRA Circular No. 2 of 2019 regulating the use of non-cash payment methods by non-bank financial institutions	Circular	Egypt	2019	source
Anti-Money Laundering Law No. 80 of 2002	Act	Egypt	2002	source
Code des assurances des États membres de la CIMA (Insurance Code of the CIMA member states)	Act	Equatorial Guinea	—	source
Targeted Financial Sanctions Guidelines on Terrorism Financing and Proliferation Financing, 2025 (FSRA No. 1 of 2025)	Guideline	Eswatini	2025	source
Insurance Act, 2005	Act	Eswatini	2005	source
Draft Insurance Proclamation	Act	Ethiopia	2026	source
Directive No. SIB/62/2026 on Licensing of Insurance Broker	Direction	Ethiopia	2026	source
RBF Prudential Supervision Policy Statement No. 2: Minimum Requirements for the Management of Cybersecurity Risk by Supervised Entities	Guideline	Fiji	2023	source
Instruction n° 2025-I-10 relative aux déclarations des incidents majeurs liés aux TIC et aux notifications volontaires des cybermenaces importantes à l'ACPR (Instruction 2025-I-10 on reports of major ICT-related incidents and voluntary notification of significant cyber threats to the ACPR)	Direction	France	2025	source
Instruction n° 2025-I-12 relative à la remise à l'ACPR des registres d'informations sur les accords contractuels portant sur l'utilisation de services de technologies de l'information et de la communication (Instruction 2025-I-12 on submitting to the ACPR registers of information on contractual arrangements for ICT services)	Direction	France	2025	source
Book V, Title VI of the French Monetary and Financial Code	Act	France	2009	source

Obligation	Country	Nature	Verified	Source	Detail
Annual ML/TF risk self-assessment filed with ARSEG	Angola	Annually, by 31 March of the following year	—	source	View →
Report cyber incidents to the Financial Services Commission	Barbados	Within 4 hours after classification; classification within 24 hours of detection	—	source	View →
Suspicious transaction reporting to COAF (insurance sector)	Brazil	Within 24 hours of concluding the analysis	—	source	View →
Annual AML/CFT effectiveness report (insurance sector)	Brazil	Annually: base date 31 December, delivered by 31 March	—	source	View →
Cyber incident reporting to SUSEP	Brazil	Within 5 business days of learning of the event	—	source	View →
Notification of cloud and data-processing outsourcing to SUSEP	Brazil	Within 30 days after signing the contract	—	source	View →
Suspicious transaction reporting by insurers	Chad	Promptly after suspicion arises	—	source	View →
AML record retention by insurers	Equatorial Guinea	10 years	—	source	View →
Suspicious transaction declaration by insurers	Equatorial Guinea	Without delay once suspicion arises (art. 21.2: not late)	—	source	View →
AML compliance officer approval (FSRA-supervised institutions)	Eswatini	Ongoing	—	source	View →
Insurer registration	Eswatini	Before carrying on insurance business	—	source	View →
Insurance distribution: pre-contract information, advice and best-interest duty	France	At each sale of insurance	—	source	View →
AML record retention (insurers, provident fund managers, insurance agents)	Israel	At least 7 years	—	source	View →
Insurance business licence	Japan	Before carrying on insurance business	—	source	View →
ICT third-party (outsourcing and cloud) risk management	Liechtenstein	—	—	source	View →
AML/CFT compliance officer and internal controls (insurers)	Macao	Ongoing	—	source	View →
AML programme, customer identification and record keeping (insurers)	Mali	Records kept at least 10 years (Art. 18)	—	source	View →
Insurers' annual audited balance sheet	Micronesia	Within three months after the end of each fiscal year	—	source	View →
Prior authorisation of insurance companies	Monaco	Before creation and before starting operations	—	source	View →
Insurance sector AML vigilance system and responsible officer	Morocco	Ongoing	—	source	View →
Insurance sector AML record retention	Morocco	10 years	—	source	View →
Insurance sector suspicious transaction reporting	Morocco	Without delay (« sans délai », Art. 24)	—	source	View →
Insurtech registration and licensing	Nigeria	Before commencing; renew 45 days before expiry	—	source	View →
Insurers: annual business report, balance sheet and profit and loss statement	North Korea	Within 3 months after the end of the business year	—	source	View →
Insurer outsourcing licence	North Macedonia	Licence needed before the outsourcing agreement	—	source	View →
Licence required for insurance business and annual licence renewal	Samoa	Licences expire each 31 December; notice of intention to renew due before 30 November (s.19)	—	source	View →
AML/CFT notice compliance by life insurers	Singapore	Ongoing	—	source	View →
Takaful operator licensing	Somalia	Before operating; renew annually	—	source	View →
Insurance business licence	South Africa	Before conducting insurance business	—	source	View →
Life insurer licensing and public company form	Thailand	Before writing life insurance	—	source	View →
Insurer annual audit and actuarial review	Uzbekistan	Annually	—	source	View →
Applies across all sectors
Lawful basis, notice and data subject rights	Albania	—	—	source	View →
Personal data breach notification	Albania	No later than 72 hours after becoming aware of the breach	—	source	View →
Beneficial ownership registration and updating	Albania	Changes within 90 calendar days of the actual change	—	source	View →
Lawful basis, notice and data subject rights	Algeria	—	—	source	View →
Personal data breach notification	Algeria	No later than 5 days after becoming aware	—	source	View →
Appoint a data protection officer	Algeria	—	—	source	View →
Designate a person responsible for information systems security	Algeria	—	—	source	View →
Lawful basis, privacy notice and data subject rights	Andorra	Ongoing	—	source	View →
Personal data breach notification to the APDA	Andorra	Within a maximum of 72 hours of becoming aware (Art. 36)	—	source	View →
Lawful basis, notice and data subject rights	Angola	Ongoing	—	source	View →
File an annual beneficial ownership and control attestation with the Registrar of Companies	Antigua and Barbuda	Annually, within 30 days after the company's anniversary date	—	source	View →
Process personal data on a lawful basis, inform data subjects and honour their rights	Argentina	Ongoing; access within 10 calendar days; rectification or deletion within 5 business days	—	source	View →
Integrity programme for legal persons, required for certain contracts with the national State	Argentina	Ongoing; before contracting with the national State where Art. 24 applies	—	source	View →
Privacy policy, collection notice and individual access and correction rights	Australia	Ongoing	—	source	View →
Ransomware and cyber extortion payment reporting	Australia	Within 72 hours of the payment or of becoming aware of it	—	source	View →
Cybersecurity incident reporting by essential and important entities	Austria	Early warning within 24 hours of becoming aware; notification within 72 hours; final report within one month of the notification	—	source	View →
Internal whistleblowing channel	Austria	50 or more employees	—	source	View →
Lawful basis, information and data subject rights	Austria	—	—	source	View →
Personal data breach notification to the Datenschutzbehörde	Austria	Without undue delay and where possible within 72 hours of becoming aware	—	source	View →
Whistleblowing: internal channel for reports of corruption and protection of reporters	Azerbaijan	Reports considered within 20 working days	—	source	View →
Lawful basis, notice and data subject rights	Bahrain	Ongoing	—	source	View →
Personal data breach notification	Bahrain	Within 72 hours of discovery	—	source	View →
Lawful basis, notice and data subject rights	Bangladesh	Ongoing	—	source	View →
Keep basic and beneficial ownership information at the registered office	Barbados	Ongoing; kept at least 5 years; certified in each annual return	—	source	View →
Lawful basis, consent, notice and data subject rights	Belarus	Deadlines of 5 working days to 15 days depending on the request (Arts 10-13)	—	source	View →
Personal data breach notification	Belarus	Immediately, no later than 3 working days after becoming aware	—	source	View →
Data protection officer or dedicated unit	Belarus	—	—	source	View →
Keep employee records available for labour inspection for at least two years	Belize	At least 2 years after the record is made	—	source	View →
Protection of whistleblowers, witnesses and victims of corruption	Benin	—	—	source	View →
Private entities to supply information to the UIF and report suspected corruption	Bolivia	—	—	source	View →
Providers of public services to accept digitally signed documents and digital-citizenship acts	Bolivia	—	—	source	View →
Lawful basis, notice and data subject rights	Bosnia and Herzegovina	Ongoing	—	source	View →
Personal data breach notification	Bosnia and Herzegovina	Within 72 hours where possible	—	source	View →
Protection against dismissal for good-faith corruption reports	Bosnia and Herzegovina	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Brazil	Ongoing	—	source	View →
Personal data breach notification to the ANPD and data subjects	Brazil	Within 3 business days; preliminary notice completed within 20 business days	—	source	View →
Integrity (anti-bribery compliance) programme	Brazil	Ongoing	—	source	View →
Whistleblowing channel and protection against retaliation (public bodies and state-owned companies)	Brazil	Ongoing	—	source	View →
Consent, notification and data subject access and correction	Brunei	—	—	source	View →
Personal data breach notification to AITI	Brunei	No later than 3 days after assessing the breach as notifiable (s.28(1))	—	source	View →
Internal whistleblowing channel	Bulgaria	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Protection of employees, witnesses and whistleblowers reporting corruption	Burkina Faso	—	—	source	View →
Lawful basis, notice and data subject rights	Cabo Verde	Ongoing	—	source	View →
Personal data breach notification	Cabo Verde	Within 72 hours of becoming aware	—	source	View →
Notification of data processing to the CNPD	Cabo Verde	Before processing starts	—	source	View →
Designation of a data protection officer	Cabo Verde	Ongoing	—	source	View →
Fair information principles: accountability, purposes, consent and individual access	Canada	Ongoing	—	source	View →
Annual forced labour and child labour supply-chain report	Canada	Annually by 31 May	—	source	View →
Confidentiality incidents: notification and incident register (Quebec)	Canada	Promptly where there is a risk of serious injury; no fixed deadline	—	source	View →
Protection against dismissal for complaints against the employer	Central African Republic	—	—	source	View →
Report significant cyber incidents to the national CSIRT	Chile	Early alert within 3 hours; update within 72 hours; final report within 15 calendar days	—	source	View →
Adopt a crime prevention model to avoid corporate criminal liability	Chile	Ongoing	—	source	View →
Lawful basis, notice and individual rights for personal information	China	Ongoing	—	source	View →
Personal information protection officer, audits and impact assessments	China	Ongoing; impact assessment before the activity	—	source	View →
Conditions for transferring personal information abroad	China	Before each transfer abroad	—	source	View →
Report cybersecurity incidents within 1, 2 or 4 hours	China	1 hour (CII operators), 2 hours (central government departments), 4 hours (others)	—	source	View →
Sign a written employment contract within one month of starting work	China	Within one month of the start of work	—	source	View →
Data subject rights and prior informed authorisation	Colombia	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Costa Rica	At collection + ongoing; access and rectification requests answered within five working days (Art. 7)	—	source	View →
Employers must allow labour inspection	Costa Rica	—	—	source	View →
Lawful basis, notice and data subject rights	Croatia	—	—	source	View →
Personal data breach notification to AZOP	Croatia	Within 72 hours of becoming aware	—	source	View →
Internal whistleblowing channel and confidential person	Croatia	Acknowledge within 7 days; feedback within 30 days, max 90	—	source	View →
Data subject rights and information on processing	Cuba	—	—	source	View →
Report ICT security incidents immediately	Cuba	Immediately ("inmediata"); no fixed deadline	—	source	View →
Whistleblowing channel and follow-up	Cyprus	Acknowledge within 7 days; feedback within 3 months of acknowledgement	—	source	View →
Cash payment limit of €10,000	Cyprus	—	—	source	View →
Internal whistleblowing channel for employers with 50 or more employees	Czechia	Acknowledge within 7 days; assess within 30 days of receipt	—	source	View →
Mining permit applicants commit to a community-responsibility cahier des charges	Democratic Republic of the Congo	At permit application and renewal	—	source	View →

Date	Entity	Country	Action	Penalty	Source
28 OCT 2026	Unnamed estate agent (megler; name not published) - licence revoked	Norway	Licence Action	—	source
27 OCT 2026	Общество с ограниченной ответственностью Микрокредитная компания «АБЛ-Финанс» (ООО МКК «АБЛ-Финанс»)	Russia	Licence Action	—	source
23 OCT 2026	Allied Funds Towarzystwo Funduszy Inwestycyjnych SA	Poland	Settlement	PLN 50,000≈ US$12,740	source
23 OCT 2026	Towarzystwo Funduszy Inwestycyjnych Agro SA	Poland	Monetary Penalty	PLN 250,000≈ US$63,699	source
23 OCT 2026	Compensa Towarzystwo Ubezpieczeń Spółka Akcyjna Vienna Insurance Group	Poland	Monetary Penalty	PLN 5,000,000≈ US$1,273,983	source
22 OCT 2026	Общество с ограниченной ответственностью Небанковская кредитная организация «Тайдон» (ООО НКО «Тайдон»)	Russia	Licence Action	—	source
21 OCT 2026	해태제과식품㈜ (Haitai Confectionery & Foods Co., Ltd.)	South Korea	Monetary Penalty	KRW 937,800,000≈ US$706,175	source
21 OCT 2026	ООО «КИНЕТИК КАПИТАЛ»	Russia	Remedial Direction	—	source
21 OCT 2026	Наумов Владимир Валерьевич	Russia	Remedial Direction	—	source
19 OCT 2026	Кредитный потребительский кооператив «Касса взаимного кредита»	Russia	Licence Action	—	source
16 OCT 2026	Соломахин Вадим Альбертович	Russia	Business Restriction · Remedial Direction	—	source
15 OCT 2026	Kyle Clifford Frost	Australia	Licence Action	—	source
15 OCT 2026	Nomura Holdings Inc.	Germany	Monetary Penalty	€320,000	source
14 OCT 2026	Sir Money Changer Pte Ltd	Singapore	Licence Action	—	source
14 OCT 2026	Iwan Margana	Indonesia	Licence Action · Prohibition Order	—	source
14 OCT 2026	PT Pratama Capital Assets Management	Indonesia	Licence Action	—	source
14 OCT 2026	Kreditbanken A/S	Denmark	Remedial Direction	—	source
13 OCT 2026	Bank of America, N.A.	United States	Settlement	US$11,662,930	source
12 OCT 2026	КПК «ЛАЙФФИНАНС»	Russia	Licence Action	—	source
12 OCT 2026	AIFM Capital AB	Sweden	Monetary Penalty · Formal Reprimand	SEK 2,000,000	source
12 OCT 2026	Thara Global Business LLC	Oman	Licence Action	—	source
12 OCT 2026	GENERALI OSIGURANJE d.d., Zagreb	Croatia	Remedial Direction	—	source
12 OCT 2026	ČATEKS d.d., Čakovec	Croatia	Formal Reprimand	—	source
12 OCT 2026	Natural person (not named): business partner of an issuer	Austria	Monetary Penalty	€5,000	source
9 OCT 2026	КПК «ДЕЛО И ДЕНЬГИ»	Russia	Licence Action	—	source

• US sanctions bill targets Russian energy sector under Graham legislation 3 Oct 2026