CySEC Advanced · Chapter 8 · Topic 1 of 9

What does MiFIR cover, and whom does it apply to?

The areas MiFIR regulates, the firms, venues and other bodies it reaches, what falls outside it, and the main changes made by the 2024 MiFIR review.

By the ExamPass CY editorial teamLast reviewed 8 min read

Short answer

MiFIR, Regulation (EU) No 600/2014, has applied directly in every Member State since 3 January 2018. Together with the MiFID II Directive, transposed in Cyprus by Law 87(I)/2017, it forms MiFID II. It sets uniform rules on trade transparency, transaction reporting, trading and clearing of derivatives, access to clearing and benchmarks, product intervention, third-country firms and, since 1 January 2022, data reporting service providers. It applies to investment firms, credit institutions providing investment services and market operators. Particular titles also reach CCPs, benchmark owners, third-country firms and some derivatives counterparties.

MiFIR's scope at a glance

Legal formA regulation, directly applicable since 3 January 2018 with no national transposition; Law 87(I)/2017 transposes the MiFID II Directive
Competent authorities in CyprusCySEC and the Central Bank of Cyprus (Law 87(I)/2017, Article 68)
Core addresseesInvestment firms; credit institutions providing investment services or activities; market operators and the trading venues they operate
Title V (derivatives)Also financial and non-financial counterparties subject to the EMIR clearing obligation (since 28 March 2024; before that, all financial counterparties and non-financial counterparties above the EMIR clearing threshold)
Title VI (access)Also central counterparties (CCPs) and holders of proprietary rights to benchmarks
Third-country firmsTitle VIII (services under a Commission equivalence decision) and, since 26 June 2021, the product intervention chapter of Title VII
Data reporting service providersTitle IVa since 1 January 2022: authorised and supervised by ESMA, except derogated APAs and ARMs
Outside MiFIR, wholly or in partConsumer banking conduct; securities financing transactions (transparency titles only); transactions by ESCB central banks for monetary, foreign-exchange or financial stability policy (non-equity transparency rules only: Articles 8, 8a, 8b, 10 and 21)
Payment for order flowBanned since 28 March 2024 for firms acting for retail or elective professional clients (Article 39a); Cyprus used no exemption

Source: Regulation (EU) No 600/2014 (MiFIR), Articles 1 and 39a, as amended by Regulations (EU) 2019/2033, 2019/2175 and 2024/791; Law 87(I)/2017, Article 68.

In the exam

The exam is written from the exam material, which predates the changes below. Expect its answer. If that answer is not among the options and the current rule is, choose the current rule.

  • Areas of uniform rules

    Exam material: Seven areas, from public trade data to services by third-country firms. Data reporting service providers are not among them.

    Current law (since 1 January 2022 (Regulation (EU) 2019/2175)): MiFIR also governs the authorisation and supervision of data reporting service providers: by ESMA, except APAs and ARMs with a derogation, which national authorities supervise.

  • Titles for third-country firms

    Exam material: Title VI alone for CCPs, and Title VIII alone for third-country firms.

    Current law (since 26 June 2021 (Regulation (EU) 2019/2033)): CCPs are still caught by Title VI. Third-country firms serving clients in the EU are also subject to the product intervention chapter of Title VII.

    The pairing of CCPs with Title VI and third-country firms with Title VIII still holds; only the word 'only' has aged.

What is MiFIR, and how does it fit with MiFID II?

MiFIR is Regulation (EU) No 600/2014 on markets in financial instruments. Because it is a regulation, it has applied directly in every Member State since 3 January 2018, with no national law needed to bring it into force. It sits alongside Directive 2014/65/EU, the MiFID II Directive, which Cyprus transposed through Law 87(I)/2017. The two acts together are usually called MiFID II; MiFIR holds the market-structure rules that must be identical across the EU. In Cyprus, Law 87 names CySEC and the Central Bank of Cyprus as the competent authorities for MiFIR (Article 68). Either may sanction any breach of MiFIR under that Law (Article 71).

Article 1(1) lists what MiFIR covers. It sets uniform requirements on disclosing trade data to the public; reporting transactions to competent authorities; trading derivatives on organised venues; non-discriminatory access to clearing and to trading in benchmarks; product intervention powers of ESMA, the EBA and national authorities, together with ESMA's powers over position limits and position management; and services provided by third-country firms, with or without a branch, after a Commission equivalence decision. The exam material lists these as seven areas, because it splits product intervention from ESMA's position powers. It does not include the point added on 1 January 2022 by Regulation (EU) 2019/2175: the authorisation and supervision of data reporting service providers, explained in What are APAs, ARMs and CTPs, and who supervises them today? CySEC's best-known use of product intervention is described in How does CySEC restrict CFDs and binary options for retail clients?

Terms used in this note

MiFID II
The combined framework of MiFIR and the MiFID II Directive (Directive 2014/65/EU).
Data reporting service provider
An APA, ARM or CTP; authorised and supervised by ESMA since 1 January 2022, unless it holds a derogation.
Equivalence decision
A Commission decision that a third country's rules have equivalent effect to the EU's, so that its firms or venues can be treated accordingly.
Payment for order flow
A payment from a third party to a broker for sending client orders to it, or to a particular venue, for execution; banned by Article 39a.

Which firms and bodies must comply?

The core addressees in Article 1(2) are investment firms, credit institutions when they provide investment services or perform investment activities, and market operators, including the trading venues they operate. Other bodies are caught only by particular titles. Title VI, on non-discriminatory access to CCPs, trading venues and benchmarks, also applies to central counterparties and to persons with proprietary rights to benchmarks. Title VIII applies to third-country firms that provide services in the EU under a Commission equivalence decision.

The exam material says that CCPs and third-country firms are subject only to Titles VI and VIII respectively. That pairing is still the right starting point, but the list has grown. Since 26 June 2021, Regulation (EU) 2019/2033 has also applied the product intervention chapter (Title VII, Chapter 1) to third-country firms serving clients in the EU. Since 1 January 2022, data reporting service providers have been governed by Title IVa. Title V on derivatives also reaches financial and non-financial counterparties. Since 28 March 2024 it reaches only those subject to the EMIR clearing obligation; before, it reached all financial counterparties and non-financial counterparties above the EMIR clearing threshold. This is explained in Where must derivatives be traded and cleared, and how is portfolio compression treated?

Since 28 March 2024 Article 1(5b) also states the basic market structure. Every multilateral system must operate as a regulated market, MTF or OTF. Systematic internalisers follow Title III, and other firms trading outside a venue must publish their trades under Articles 20 and 21. MiFIR is not consumer-protection law for banking, so deposit-taking and lending fall outside it. Securities financing transactions are outside Titles II and III on transparency. Transactions by central banks of the European System of Central Banks (ESCB) for monetary, foreign-exchange or financial stability policy are exempt only from the non-equity transparency rules in Articles 8, 8a, 8b, 10 and 21, and only if the central bank has told its counterparty in advance.

What did the 2024 MiFIR review change?

Regulation (EU) 2024/791, the MiFIR review, entered into force on 28 March 2024 and set no separate application date. Many changes applied at once. Others started on dates set in the amended articles, or waited for new technical standards or ESMA systems. Until the new standards applied, the older delegated acts kept applying (Article 54(3)). For this chapter the main changes are a single 7% volume cap, narrower transparency for bonds and derivatives, new quote sizes for systematic internalisers, a trading obligation aligned with EMIR clearing, and a wider exemption for post-trade risk reduction, including compression. The review also set up a procedure for ESMA to select one consolidated tape provider for each asset class. ESMA authorised the first, for shares and ETFs, in July 2026.

The review also banned payment for order flow (Article 39a). A firm acting for retail clients, or for clients treated as professional at their own request, may not receive any fee, commission or non-monetary benefit from a third party for executing their orders on a particular venue or for forwarding them to a third party for execution there. Venue fee rebates that benefit only the client are allowed. Member States could keep a temporary exemption until 30 June 2026, but Cyprus did not use it, so the ban has applied to Cypriot firms since 28 March 2024. Its link with best execution is covered in What do best execution and client order handling require?

How to think about it

Start with the addressee. Investment firms, banks providing investment services and market operators are subject to the whole of MiFIR. Anyone else is caught only by the title written for them: CCPs and benchmark owners by the access rules, third-country firms by the equivalence and product intervention rules, counterparties subject to EMIR clearing by the derivatives trading obligation, and data reporting service providers by Title IVa. Then check the subject matter. Trade data, reporting, derivatives trading, access and product intervention are MiFIR; retail banking conduct is not. Finally, ask whether the 2024 review changed the rule.

Common mistakes

  1. Treating MiFIR as needing a Cyprus law to apply. It has applied directly since 3 January 2018. Law 87(I)/2017 transposes the Directive and names the competent authorities.

  2. Assuming CCPs and third-country firms fall under the whole Regulation. They are caught only by the titles written for them, and third-country firms now also by the product intervention chapter.

  3. Leaving data reporting service providers out of MiFIR. Their authorisation and supervision have been in MiFIR, under ESMA, since 1 January 2022.

Practise this topic

Test what you just read

The Chapter 8 pack has 112 exam-style questions, 6 of them on this topic. Every question has a hint before you answer and a full explanation after.

Try the free demo

Or revise the numbers first with 24 free Chapter 8 flashcards →

Last reviewed on by the ExamPass CY editorial team against the law in force on that date. Study notes help you prepare for the CySEC exams; they are not legal advice. ExamPass CY is not affiliated with CySEC.

How we write study notesReport an error