Q4 2026 regulatory calendar for Cyprus firms: CySEC QST returns, DORA fees, FATF and T+1

6 October — AMLA's consultation on draft standards for cross-border information exchange between financial intelligence units closes at 23:59 CEST. It concerns FIUs rather than firms, but it is the only AMLA consultation open at the start of the quarter.

12 October — ESMA's consultation on annual EMIR reporting of clearing activity at recognised third-country CCPs closes. It matters to clearing members and clients that clear through non-EU CCPs.

18 October — last day (23:59 CEST) to apply for AMLA's sectoral roundtables on simplified customer due diligence. The roundtables are expected to take place in Frankfurt between 9 November and 2 December 2026 and will inform AMLA guidelines; a formal consultation is to follow later.

23 October — written queries on Form QST-ASP must reach CySEC before this date. 28 October — the same applies to queries on Form QST-CIF.

26–30 October — FATF plenary in Paris. Updated lists of high-risk and monitored jurisdictions normally follow a plenary, so AML officers should be ready to update country-risk ratings and enhanced due diligence triggers.

30 October — submission deadline, through CySEC's Transaction Reporting System, for Form QST-MC (Circular C802 of 29 September) from UCITS management companies, AIFMs, internally managed funds and small AIFMs, and for Form QST-ASP (Circular C804 of 2 October) from administrative service providers. Both cover the reference date 30 September 2026.

4 November — submission deadline for Form QST-CIF (Circular C803 of 2 October), for every CIF authorised by 30 September 2026. Published summaries of the circular say that CySEC will not grant extensions. On the same day the European Supervisory Authorities hold their Joint Consumer Protection Day in Rome.

9 November — ESMA's consultation on updated disclosure guidelines under the Prospectus Regulation closes.

25 November — the EBA consultation on draft standards for reclassifying investment firms as credit institutions closes. It covers the EUR 30 billion total-assets threshold, reporting by firms above EUR 5 billion and waivers, so it mainly concerns the largest investment firms; CySEC drew it to CIFs' attention in Circular C798 of 2 September.

30 November — according to a press report of CySEC's announcement, DORA ICT supervisory fee invoices, which CySEC sends after the self-categorisation forms due on 15 September, must be paid by this date. We could not confirm the date in a second source, so check the due date on the invoice itself.

7 December — the first EU T+1 milestone. Professional clients' allocations and confirmations must be sent electronically, in standard formats, and reach the investment firm by 23:00 CET on trade date, once the amending settlement discipline rules are in force. Full T+1 settlement follows on 11 October 2027.

8–11 December — MONEYVAL, the Council of Europe committee that evaluates Cyprus against the FATF standards, holds its plenary in Strasbourg; see our study note on high-risk third countries and MONEYVAL.

Dates come from the authorities' own pages where we can read them. For CySEC circulars, which we could not read directly, each date matches at least two published summaries, except the DORA fee date, which rests on a single press report. Confirm every CySEC deadline against the circular, set internal cut-offs a few working days earlier and give each item an owner. This page will be updated if a date changes.