Markets in Financial Instruments Directive II

Before any investment service is provided, clients must be classified as retail, professional, or eligible counterparty to determine the applicable level of protection.

Business impact: Classification drives every downstream obligation — suitability, disclosure, product eligibility, and reporting. It requires front office staff to apply documented criteria at onboarding, compliance to maintain and review the classification framework, and core systems to store and propagate classification status accurately across all processes. Misclassification is a primary source of regulatory sanction.

Firms must provide prescribed information about themselves and collect sufficient client information to perform the controls required by the client's level of protection.

Business impact: On-boarding is the firm's main point of regulatory exposure — incomplete client data creates cascading failures across suitability, product governance, and reporting. It requires a structured client data model in core systems, disciplined data collection by front office, and clear ownership across compliance and operations. Firms that streamline this process digitally gain both compliance quality and commercial efficiency.

Suitability assessments are required before investment advice and portfolio management; appropriateness checks apply to non-advised execution in complex products — both calibrated to the client's profile.

Business impact: This is the highest area of conduct risk and regulatory sanction exposure in the industry. It demands automated suitability engines linked to client profiles and product catalogues, documented outcomes retained per transaction, and workflow controls that block execution where assessments are incomplete. The suitability framework directly shapes which products can be recommended to which clients — making it a strategic as well as a compliance matter.

Manufacturers must define target markets and conduct product reviews; distributors must ensure products reach only the clients for whom they are designed.

Business impact: Product governance creates a dual obligation that requires sustained coordination between manufacturers and distributors. Core systems must embed target market parameters at the product level and enforce eligibility checks at point of sale. Management bodies are explicitly accountable for oversight of the product governance process, making this a board-level concern with direct implications for product strategy and distribution model design.

Firms must provide clients with all relevant information on services rendered — including transaction confirmations, periodic statements, portfolio valuations, cost disclosures, and loss alerts.

Business impact: Reporting obligations are operationally intensive, requiring accurate aggregation of all direct and indirect costs across the full-service chain, timely delivery of disclosures, and robust data infrastructure. Ex-ante and ex-post cost disclosures in particular demand close coordination between product, finance, and operations. Reporting quality is increasingly a commercial differentiator — poor reporting generates both regulatory and reputational risk.

MiFID II strictly regulates third-party payments — inducements are only permissible where they demonstrably enhance the quality of service to the client and are fully disclosed.

Business impact: Inducements rules directly challenge traditional distribution economics, particularly for firms relying on retrocessions or third-party commissions. All inducements must be registered, tested against the quality enhancement standard, and disclosed to clients on an ex-ante and ex-post basis. Business introducer arrangements must be formalised and compliant. For many firms, this requires a fundamental review of distribution and pricing strategy.

Firms must retain records of all services, transactions, client communications, and organisational arrangements — including telephone and electronic communications — in a tamper-proof, regulator-accessible format.

Business impact: Records are the evidentiary foundation of any regulatory defence. Gaps are treated by supervisors as gaps in compliance. This requires a centralised, structured record-keeping architecture, a minimum five-year retention policy, and the ability to reconstruct individual transactions on demand. Front office staff must understand that verbal instructions and telephone conversations are subject to recording obligations — a significant cultural and operational change for many firms.

All personnel providing investment advice or information on financial instruments must meet defined competence standards set out in ESMA guidelines, with supervised practice periods applying before full authorisation.

Business impact: This is an explicit governance obligation — management bodies must ensure staff have sufficient time and resources to achieve and maintain competence. It requires a firm-wide competence framework by role, individual assessment and tracking via HR systems, ongoing CPD (Continuous Professional Development) monitoring, and regular reporting to senior management. Firms that treat this as a genuine investment rather than a compliance exercise build stronger advisory capability and reduce conduct risk over time.