MiFID II Overview: Key Rules and the Digital Tools Driving Compliance

Between December 2018 and December 2023, Sigma Broking Limited submitted 924,584 incorrect MiFID II transaction reports to UK regulators. Nearly every trade the London-based firm executed during that five-year period was reported incorrectly under the Markets in Financial Instruments Directive II framework. The FCA fined Sigma £1,087,300 in February 2025, marking the firm’s second enforcement action for similar failures. The first came in October 2022 when regulators discovered Sigma had failed to report 56,000 transactions entirely.

The mistakes stemmed from incorrect system setup and weak reporting processes during implementation. Yet Sigma’s case illustrates a broader challenge facing thousands of European financial institutions: meeting the technical demands of MiFID II while managing operational complexity and escalating regulatory scrutiny.

What MiFID II Demands

MiFID II came into effect on 3 January 2018, overhauling how European markets operate. The directive applies to investment firms including brokers, dealers and asset managers, alongside trading venues, exchanges and market operators. Its three pillars address investor protection, market transparency and enhanced reporting standards.

The most technically demanding requirement centres on transaction reporting. Under Article 26(1) of UK MiFIR, firms must report transactions by close of the following working day. Reports comprise up to 65 XML fields, a dramatic increase from 23 fields under the original MiFID. These reports must capture comprehensive details: information about the financial instrument, quantity and price, buyer and seller details, and the decision makers behind each transaction across all asset classes.

Article 26(7) limits how reports can be submitted. Investment firms can report directly to the FCA’s Market Data Processor, use an Approved Reporting Mechanism acting on their behalf, or rely on trading venues submitting on behalf of entities executing through their systems. Firms remain responsible for completeness, accuracy and timeliness even when using third parties.

Beyond Transaction Reporting

Best execution requirements demand firms take all sufficient steps to achieve the best trading result for clients. This marked an increase from the “reasonable steps” standard under MiFID I, forcing firms to demonstrate more rigorous processes.

The directive also mandates comprehensive record keeping. Firms must record, monitor and archive phone calls, emails, video conferences and instant messages for seven years. This enables regulators to reconstruct events surrounding trades and verify firms acted in clients’ best interests.

The Cost of Getting It Wrong

Sigma’s independent review confirmed the extent of failures in February 2025. But financial penalties represent only part of the compliance burden. Before MiFID II took effect, industry estimates suggested firms would spend approximately $2.1 billion on compliance preparations during 2017, with around $700 million dedicated specifically to transaction and trade reporting by asset managers and investment banks. For many buy-side firms, transaction reporting became their single most expensive technology investment.

The operational challenges compound financial costs. Firms must coordinate data across multiple systems and counterparties while meeting tight submission deadlines. When a UK broker failed to submit more than 46,000 single-stock CFD transaction reports between October 2022 and March 2023, the FCA fined it just under £100,000. What made the case particularly damaging was timing: the broker had identified its failure following a third-party review but did not proactively report the breach to the FCA. Regulators independently identified the discrepancy, demonstrating the expectation that firms must notify authorities immediately when discovering reporting failures.

In 2024, the FCA imposed £176 million in fines on financial firms, a 230% increase from £53.4 million in 2023. The regulator’s message is clear: material and systemic regulatory breaches will not be tolerated.

The Evolution Continues

The regulatory landscape keeps moving. The 2024 review package, known as MiFID III and MiFIR 2, introduces significant changes including an EU-wide consolidated tape, a ban on payment-for-order-flow, and a single volume cap. These amendments take effect from late 2025 and early 2026, representing the most significant updates to EU financial markets infrastructure since the original implementation.

The European Securities and Markets Authority began drafting new delegated acts in summer 2024, with completion expected by late 2025. This timeline gives firms breathing room to upgrade compliance infrastructure before requirements become enforceable.

Where MiFID II and MiFIR Stand in 2026

The EU review package is now in its delivery phase. Regulation (EU) 2024/791, which amends MiFIR, entered into force on 28 March 2024. It introduced the ban on firms receiving payment for order flow, set out in Article 39a of MiFIR. The amending directive, Directive (EU) 2024/790, required Member States to transpose its changes to MiFID II by 29 September 2025.

The consolidated tape is the most visible change. The technical standards for EU consolidated tape providers were published in the Official Journal on 3 November 2025. ESMA runs a separate selection procedure for each asset class, and each provider is appointed for five years under ESMA supervision. ESMA’s consolidated tape page shows the position: Ediphy (fairCT) was selected for bonds and its authorisation process is ongoing. On 19 December 2025, ESMA selected EuroCTP, a joint venture of 15 European exchange groups, as the first provider for shares and ETFs. ESMA opened the selection for OTC derivatives on 5 January 2026 and chose Etrading Software (Netherlands) B.V. on 6 July 2026.

Research payment rules changed on 6 June 2026. Directive (EU) 2024/2811 and Commission Delegated Directive (EU) 2026/374 let investment firms choose between bundled and separate payment for research and execution. Firms must assess the quality of the research they receive each year, whichever payment model they use. The earlier restriction on bundled payment for research on issuers with a market capitalisation above €1 billion no longer applies in the same form. The directive text is on EUR-Lex.

Transaction reporting is next. On 2 July 2026, ESMA published its final report on simplifying financial transaction reporting across MiFIR, EMIR and SFTR. It recommends a phased programme: short-term cuts to fields, reconciliation requirements and error notifications, followed by a long-term “report once” model built on a single modular framework. ESMA did not adopt full single-sided reporting. The changes depend on legislative amendments still under negotiation, so existing EU transaction reporting obligations continue to apply.

The UK Route After Brexit

The UK now runs its own version of the regime, UK MiFIR, and has chosen a different path on transaction reporting. On 3 August 2026, the FCA published Policy Statement PS26/15, which sets the final rules. The new regime comes into force on 3 April 2028, and the FCA applies a flexible supervisory approach to some areas from 3 August 2026 until then.

The package cuts reportable fields from 65 to 52 and removes reporting duties for instruments that trade only on EU venues. Foreign exchange derivatives leave the scope, and the default back-reporting period falls from five years to three. The FCA estimates the changes will reduce reporting costs by more than £100 million a year. A further consultation, CP26/34, opened on 2 October 2026 with responses due by 6 November 2026. RegTech Post covers the dates, scope changes and system work in Preparing for FCA Transaction Reporting Changes by April 2028.

Firms with reporting lines in both jurisdictions face two diverging rulebooks. EU reporting stays on its current field set while ESMA’s reform moves through legislation, and UK reporting moves to the 52 field model in April 2028.

What Compliance Teams at Investment Firms Should Check Now

Start with reportability logic. Sigma’s failures began with a single person deciding which instruments were reportable and no check on that decision. Test how your systems classify instruments today, and map which of them fall out of scope under the UK changes, including EU-only instruments and FX derivatives. Confirm which of your reports go to EU regulators and which go to the FCA, because the two regimes will run on different field sets.

Review the reporting stack next. If you rely on an ARM, a trading venue or a vendor platform, ask each provider for its plan and dates for the UK schema change, and check any transmission arrangements that the new conditional single-sided reporting framework could replace. RegTech Post’s profiles of OneSumX and CUBE Global show how vendors approach regulatory reporting and regulatory change.

Then check the policies the 2026 changes touch. Research teams should confirm which payment model the firm uses since 6 June 2026 and that an annual quality assessment is scheduled. Execution teams should confirm that no payment for order flow is received, including on OTC transactions. Trading and data teams should track consolidated tape authorisations, since the tape will change the market data they buy and use for best execution monitoring.

Finally, put ownership and evidence in one place. A GRC platform can hold the control library, the regulatory change log and the audit trail that supervisors ask for after a reporting error. RegTech Post’s guides to GRC platforms and the future of GRC platforms cover the options. Whatever the tooling, report any breach you find to the regulator promptly, as the FCA’s CFD reporting case showed.

Transaction Reporting: The ARM Solution

Financial institutions increasingly deploy Approved Reporting Mechanisms to manage their obligations. UnaVista, London Stock Exchange Group’s global platform, assists firms with over 8 billion transaction reports annually for EMIR and MiFIR across all asset classes. The platform provides smart validation using internal and external reference data sources, management information dashboards and tools to identify recurring errors before regulators flag them.

Euronext’s Transaction Reporting Service connects to all major European regulators including AMF, AFM, FCA, FSMA, CMVM and Consob. The service publishes trades and quotes according to requirements and sends transaction reports to relevant authorities in appropriate format and timeframe.

Bloomberg’s Trade Order Management Solutions received FCA approval to report securities with an ISIN and OTC derivatives. The platform integrates transaction reporting directly via the trade ticket, eliminating manual re-keying and file conversions. This integration addresses one of the core problems that caught out Sigma Broking: reducing over-reporting and under-reporting through automated validation.

For smaller operations, platforms like WealthKernel integrate directly with the FCA’s Market Data Processor portal, performing transaction reporting for all securities executed on its platform. This allows tenants to enter transmission agreements at no additional cost, reducing the compliance burden for firms without large technology budgets.

Quality Assurance and Reconciliation

Specialist platforms handle the validation challenge regulators expect firms to address. Qomply’s ReportAssure platform performs quality assurance, accuracy, timeliness and completeness checks for transaction reports under MiFID II, EMIR and SFTR. The platform delivers comprehensive arsenals of accuracy checks powered by proprietary assurance engines, catching errors before submission.

Cappitech provides automated generation of regulatory reports and reconciliation services. The platform handles multiple jurisdictions and offers three-way reconciliation to validate reporting data against front-office records and regulator feedback. These reconciliations take seconds, returning detailed lists of matches and mismatches that enable rapid error correction.

MarketAxess provides a single platform for all transaction reporting regulations, featuring a rules engine that ingests, formats and filters raw transaction data into reports. The system offers self-directed access to five to seven years of historic transaction reports with quick exception identification. This historical access proves crucial when regulators request information about past trades during investigations.

SteelEye’s platform enables firms to conduct three-way reconciliation by comparing their original files against data received by National Competent Authorities and ARMs. This catches discrepancies that might otherwise trigger the kind of enforcement action Sigma Broking faced.

Reference Data: The Foundation Layer

Reference data providers supply the accurate instrument identifiers and static data that underpin compliant reporting. ICE Data Services provides MiFID II-specific data solutions that generate eligibility flags and a range of data standards, including CFI codes, LEIs and information on underlying instruments. The platform dynamically assesses conditions underpinning transaction reporting eligibility, including venues where instruments trade and thorough global assessment of ISINs with underlying instruments.

Bloomberg’s comprehensive solutions suite integrates seamlessly with Trade Order Management Solutions and Asset and Investment Manager platforms, providing strategic enterprise workflow across the entire trade lifecycle from pre-trade to post-trade. The Voice Taker Workflow links execution management systems, messaging systems and trade confirmation systems to create seamless workflows for voice execution off-venue with full audit trails.

S&P Global offers reference data, transaction cost analysis and best execution benchmarking tools. The platform enables firms to conduct sophisticated benchmarking, manage research evaluation and utilization processes, and efficiently manage regulatory outreach with counterparties.

Communications Surveillance

MiFID II’s record-keeping obligations extend beyond transaction data to all relevant communications. NICE’s NTR-X provides assurance that all regulated employees and communication devices they use are being recorded, while SURVEIL-X Communication provides comprehensive surveillance coverage for all communication modalities including email, chat, video and voice. These solutions ensure firms can reconstruct trades from recorded conversations and digital interactions, meeting the seven-year retention requirement.

Mimecast provides cloud-based email archiving and compliance monitoring. The platform enables firms to search communications rapidly, demonstrating compliance status within seconds. It integrates with Microsoft Exchange and Office 365, providing threat intelligence for widely-used email platforms while maintaining immutable archives with compliance-driven chains of custody.

ASC Technologies offers AI-powered recording and compliance management tailored for financial institutions. The platform provides compliance phrase spotting to identify mandatory statements and alert omissions, auto-categorization according to compliance relevance with appropriate retention periods, and real-time risk alerting to filter entire communication streams and flag potential issues automatically.

Built-In Compliance

Modern trading platforms build compliance directly into workflow, addressing problems at source rather than through post-trade validation. Trading Technologies’ platform includes microsecond-level precision timestamps and the ability for users to populate required fields across front-end interfaces and FIX applications. Administrators can control and lock down fields to minimize errors, the kind of system-level controls that could have prevented Sigma’s five-year reporting failure.

Eurobase’s Siena platform offers comprehensive regulatory reporting under MiFIR and EMIR frameworks. Siena provides end-of-day transaction reporting with connectivity to all major UK and EU ARMs and regulators, plus real-time trade reporting with connectivity to all major UK and EU APAs and regulators. The platform includes complete audit trails and trade reconstruction capability.

The Strategic Advantage

Sigma Broking’s case demonstrates what happens when compliance becomes an afterthought rather than a strategic priority. The firm relied on a single individual to manually identify which financial instruments were reportable when new business commenced. It did not put in place any steps to scrutinize this process or any checks to ensure correct trades had been identified as reportable.

By contrast, financial institutions that embed specialized compliance technology gain operational advantages beyond avoiding regulatory penalties. Automated reporting reduces error rates and processing times. Integrated platforms provide visibility across all transaction data through single interfaces, enabling firms to identify trends and common issues before they trigger regulatory attention.

Management information tools within platforms like UnaVista enable anonymized peer-to-peer analysis and industry benchmarking. Firms can compare their reporting quality against real industry benchmarks, identifying areas requiring improvement before regulators flag deficiencies. This proactive approach stands in stark contrast to reactive responses following regulatory investigations.

Looking Forward

As MiFID evolves toward its next iteration, compliance infrastructure becomes increasingly sophisticated. The directive’s emphasis on transparency and investor protection continues to shape market behavior. Yet the gap between firms with robust compliance systems and those struggling with inadequate processes grows wider.

Organizations investing in sophisticated compliance platforms position themselves not merely to meet current obligations but to adapt swiftly as regulatory demands evolve. The convergence of automated reporting, communications surveillance and data analytics creates comprehensive compliance frameworks capable of handling future changes without the kind of systemic failures that destroyed Sigma Broking’s compliance record.

For financial institutions operating in European markets, the lesson is clear: compliance technology represents strategic infrastructure, not discretionary spending. Firms that recognize this reality before regulators come calling turn potential vulnerabilities into competitive advantages.