Regulatory change is no longer arriving as broad, sector-wide overhauls, according to CUBE’s latest fortnightly analysis, which argues that precision, not volume, is now the defining feature of financial services regulation.
The report, covering 22 August to 4 September 2026, points to a cluster of unrelated actions, from the EBA’s consultation on the €30bn threshold determining when an investment firm must become a bank, to the US Treasury’s newly launched Quantum-Readiness Task Force, as evidence that rules are increasingly targeted at individual entities, vendors or licensing decisions rather than entire markets.
CUBE notes that this fortnight alone saw the EBA open two separate consultations, one on reclassifying investment firms as credit institutions and another on operational risk management standards, while the US Treasury asked institutions to map cryptographic dependencies vendor by vendor, and ASIC cut its licensing turnaround target to 120 days ahead of a digital asset platform deadline. None of these developments share a rulebook, region or timeline, which CUBE says is itself the point. The firm’s Cost of Compliance Report 2025 found that 82% of firms track between 26 and 100 regulatory developments a month, with 52% needing two to three weeks to complete an initial impact assessment on each one.
CUBE argues that the unit of complexity is shrinking to the level of the individual entity. The EBA’s €30bn threshold consultation is assessed at both solo and group level, with waivers judged against factors specific to the applying firm rather than its sector. This mirrors a structural pattern CUBE has flagged before: multi-entity, multi-jurisdiction complexity persists because thresholds and obligations attach to individual entities, not groups, forcing firms to assess impact one entity at a time.
A separate strand covers financial infrastructure, with the Quantum-Readiness Task Force coordinating a shift to post-quantum cryptography across sector alignment, vendor readiness and digital-asset risk, alongside ASIC’s licensing deadline of 30 September 2026 and the ECB’s planned Q3 2026 launch of Pontes, its bridge for settling DLT-based transactions in central bank money. CUBE frames this as infrastructure change on a technology-driven timeline rather than a legislative one, echoing a July 2025 warning from the Bank for International Settlements that firms “must urgently initiate preparations today” for the migration of cryptographic infrastructure.
CUBE’s overarching message is that narrower, more targeted rules can work in compliance teams’ favour, provided tracking systems are consolidated rather than siloed. Where oversight is fragmented, a fortnight of unrelated deadlines becomes a scramble; where it is centralised, the same fortnight is simply a scheduling question.
For more, read the full story here.
Copyright © 2026 FinTech Global
