MiFID II: EU Investment Firm Authorization, Conduct, and Market Structure Requirements

Summary

MiFID II (Directive 2014/65/EU) plus MiFIR (Regulation 600/2014) is the EU's harmonized framework for investment-firm authorization, conduct of business, market structure, and investor protection. Authorized EU/EEA firms must deliver best execution, report transactions to their NCA by T+1 under Article 26 MiFIR, restrict inducements (an absolute ban for independent advice and portfolio management), and run product governance for every instrument. The 2024 MiFID II/MiFIR review ("MiFID III") brings a full payment-for-order-flow ban by 30 June 2026, removes RTS 28 reporting in favor of active best-execution monitoring, and overhauls transparency: the revised RTS 1/RTS 2 regime applies from 2 March 2026 and the double volume cap has been replaced by a single volume cap mechanism (SVCM). UK firms follow a separate, diverging FCA regime post-Brexit. [src1, src2, src7]

Rule

Investment firms authorized in the EU/EEA must comply with MiFID II's five core obligation pillars: (1) obtain and maintain authorization from the national competent authority, (2) achieve best execution for client orders by taking all sufficient steps to obtain the best possible result considering price, costs, speed, likelihood of execution, and settlement, (3) submit complete transaction reports to the competent authority by close of the next working day under Article 26 MiFIR, (4) restrict inducements — firms providing independent advice or portfolio management may not accept third-party payments, and all inducements accepted in other contexts must demonstrably enhance service quality — and (5) operate product governance arrangements that identify, assess, and monitor a target market for every financial instrument manufactured or distributed. [src1, src2]

Evidence

Since MiFID II/MiFIR took effect on 3 January 2018, national competent authorities across the EU have imposed 2,379 administrative sanctions and measures totaling EUR 107 million, with MiFID II alone accounting for EUR 44.4 million in fines in 2024. [src4] The highest single penalty was EUR 12.9 million, imposed by BaFin against Citigroup Global Markets Europe in May 2024 for algorithmic trading violations under Article 17(1) MiFID II. [src4] The MiFID II/MiFIR review package (Directive 2024/790 and Regulation 2024/791) entered into force on 28 March 2024, introducing a full PFOF ban effective 30 June 2026, removal of RTS 28 best-execution reporting, and revised systematic internaliser thresholds. [src2, src5] ESMA's April 2025 Final Report on order execution policies requires firms to actively monitor, analyze, and verify best execution — not merely record communications. [src6] The revised transparency regime (amended RTS 1 and RTS 2 for equity and non-equity instruments) became applicable on 2 March 2026, and the double volume cap mechanism was replaced by the single volume cap mechanism (SVCM) — the last double-volume-cap reporting day was 31 December 2025 and SVCM calculations now run quarterly off Article 26 transaction-reporting data. [src7] In its second transition statement (10 October 2025), ESMA confirmed that firms must comply with amended provisions as soon as their member state transposes them, regardless of any delay in the European Commission's adoption of the implementing measures. [src7]

Key Properties

• Legal basis: Directive 2014/65/EU (MiFID II), Regulation 600/2014 (MiFIR), plus delegated regulations (RTS 1-28, ITS) and ESMA guidelines
• Scope: All investment firms, credit institutions providing investment services, trading venues (regulated markets, MTFs, OTFs), systematic internalisers, and data reporting services providers operating in EU/EEA
• Enforcement: National competent authorities (NCAs) in 27 member states + 3 EEA states; EUR 100 million in total EU financial-services fines in 2024, with 976 sanctions and measures imposed [src4]
• PFOF ban deadline: 30 June 2026 — Article 39a MiFIR prohibits investment firms from receiving any fee or commission from third parties for routing client orders to particular execution venues [src5]
• Transaction reporting: Article 26 MiFIR — complete details reported to NCA by close of T+1; revised reporting specifications and position-reporting register went live 1 April 2026, with FITRS quantitative transparency data submissions ending 31 March 2026 [src2, src7]
• Transparency regime: Amended RTS 1 (equity) and RTS 2 (non-equity) apply from 2 March 2026; the double volume cap was replaced by the single volume cap mechanism (SVCM), calculated quarterly from Article 26 data [src7]
• Product governance: Manufacturers must define positive and negative target markets; distributors must obtain and assess target market data; both must review at least annually [src3]

Conditions

• Applies when: The firm is an investment firm or credit institution providing investment services in any EU/EEA member state; the firm operates a trading venue or acts as a systematic internaliser; the firm manufactures or distributes financial instruments to EU clients
• Does NOT apply when: The firm is exclusively regulated under UK FCA rules post-Brexit; the firm qualifies for an Article 2 MiFID II exemption (e.g., certain commodity dealers, persons dealing on own account not providing other services, central banks); the firm is a pure UCITS/AIF manager not providing MiFID top-up services
• Confidence degrades when: Member state transposition of MiFID III amendments is incomplete (deadline was 29 September 2025); ESMA Level 2 measures under the MiFID III review are still in consultation or pending adoption (e.g., revised RTS on order execution policies); firm operates across multiple EU jurisdictions with divergent national gold-plating

Constraints

• EU/EEA jurisdiction only — UK firms follow the onshored UK MiFID regime, which is diverging (FCA CP25/36 on client categorisation issued December 2025) [src2]
• The MiFID III amending directive (2024/790) required member state transposition by 29 September 2025; firms must verify their NCA has transposed before relying on new provisions such as relaxed research payment rules [src1]
• Article 2 exemptions: entities exclusively dealing on own account (without being market makers or operating outside a trading venue), insurance intermediaries, and certain commodity firms are outside scope [src1]
• Product governance applies proportionately — simple, non-complex instruments distributed to a broad market require less granular target market assessment than structured products [src3]
• Transaction reporting under Article 26 MiFIR interacts with EMIR (derivatives) and SFTR (securities financing) — avoid double-reporting by checking which regime takes precedence for each instrument type [src2]

Rationale

MiFID II exists to create a harmonized EU single market in financial services that protects investors, promotes transparent and orderly markets, and prevents regulatory arbitrage between member states. The directive's best execution, inducements, and product governance rules directly address the information asymmetry between investment firms and retail clients — ensuring firms act in clients' best interests rather than maximizing their own commissions. The 2024 review package further tightens these protections by banning PFOF, simplifying reporting (removing RTS 28 while strengthening active monitoring), and relaxing research unbundling to support SME coverage. [src1, src2]

Framework Selection Decision Tree

START — User needs EU financial services compliance guidance
├── Which regulation?
│   ├── Investment firm conduct and market structure
│   │   └── MiFID II / MiFIR ← YOU ARE HERE
│   ├── Market abuse (insider dealing, manipulation)
│   │   └── MAR (Regulation 596/2014)
│   ├── Fund management (UCITS, hedge funds)
│   │   └── UCITS Directive / AIFMD
│   └── Derivatives clearing and reporting
│       └── EMIR
├── Which jurisdiction?
│   ├── EU/EEA member state → Apply MiFID II ← YOU ARE HERE
│   ├── UK only → UK onshored MiFID (FCA regime)
│   └── EU + UK cross-border → Both regimes; check equivalence decisions
├── What type of firm?
│   ├── Investment firm (authorized under MiFID II) → Full obligations apply
│   ├── Credit institution providing MiFID services → MiFID II conduct rules apply via CRD
│   ├── Trading venue operator → Title III MiFID II obligations
│   └── Exempt under Article 2 → MiFID II does NOT apply
└── What service is provided?
    ├── Portfolio management or independent advice → Strict inducements ban (no third-party payments)
    ├── Non-independent advice → Inducements permitted if quality-enhancing and disclosed
    ├── Execution of orders → Best execution under Article 27; PFOF ban from 30 June 2026
    └── Product manufacturing/distribution → Product governance per Article 16(3) and 24(2)

Application Checklist

Step 1: Determine authorization and scope

• Inputs needed: Firm type, jurisdiction of authorization, services provided, client types served
• Output: Confirmation that MiFID II applies; identification of which Articles and delegated acts are relevant
• Constraint: If the firm holds an Article 2 exemption or is authorized exclusively under UK FCA rules, stop — MiFID II does not apply [src1]

Step 2: Classify obligations by service type

• Inputs needed: Full list of investment services and activities; whether firm acts as manufacturer, distributor, or both for financial products
• Output: Mapped obligation matrix — best execution (Article 27), suitability/appropriateness (Articles 25), product governance (Articles 16(3)/24(2)), inducements (Article 24(7)-(9)), transaction reporting (Article 26 MiFIR)
• Constraint: Independent advisers and portfolio managers face an absolute inducements ban — do not advise that quality-enhancement tests apply to these services [src1]

Step 3: Implement best execution and reporting

• Inputs needed: Order types executed, execution venues used, client order flow data, current reporting infrastructure
• Output: Best execution policy documented and published; transaction reporting to NCA operational; PFOF arrangements terminated or scheduled for termination by 30 June 2026
• Constraint: Under the revised framework, firms must actively monitor and verify best execution, not merely record communications; RTS 28 annual reports are no longer required but order execution policies must be enhanced [src6]

Step 4: Establish product governance framework

• Inputs needed: Product catalog, target market definitions from manufacturers (or own assessment for distributors), distribution channel strategy
• Output: Documented positive and negative target markets per product; annual review schedule; complaint and sales data monitoring process
• Constraint: Target market granularity must be proportionate to product complexity; structured products require detailed six-criteria assessment (client type, knowledge/experience, financial situation, risk tolerance, objectives, needs) [src3]

Step 5: Validate compliance and escalate gaps

• Inputs needed: Outputs from Steps 1-4, internal audit findings, NCA supervisory correspondence
• Output: Compliance gap assessment; remediation plan with deadlines; board-level compliance attestation
• Constraint: If the firm operates across multiple member states, verify transposition status in each jurisdiction — gold-plating varies and may impose stricter requirements than the directive minimum [src2]

Anti-Patterns

Wrong: Treating the PFOF ban as already in effect everywhere

Some compliance teams have prematurely dismantled all payment-for-order-flow arrangements across the EU. Under the transitional provision, member states where PFOF existed before 28 March 2024 may grant a temporary exemption until 30 June 2026 — Germany has exercised this exemption. [src5]

Correct: Check whether your NCA's member state has exercised the transitional PFOF exemption

Verify the ESMA notification list for member states using the Article 39a(2) MiFIR temporary exemption. If your firm operates in Germany, PFOF arrangements may continue until 30 June 2026 for clients domiciled there. Plan for full cessation by that hard deadline. [src5]

Wrong: Relying on RTS 28 annual reports as the primary best execution compliance tool

Some firms still produce and publish RTS 28 top-five-venue reports, treating them as their main evidence of best execution compliance. The MiFID II review removed this obligation — and ESMA now expects active monitoring, analysis, and verification of execution quality. [src6]

Correct: Implement active best execution monitoring

Replace passive annual reporting with real-time or periodic execution quality analytics that compare price, cost, speed, and likelihood of execution across venues. Document the methodology and ensure the compliance function reviews findings regularly. [src6]

Wrong: Applying a uniform product governance assessment to all instruments

Firms sometimes apply the same granular six-criteria target market analysis to simple exchange-traded equities as they do to complex structured products, creating unnecessary operational burden — or conversely, apply minimal governance to complex products. [src3]

Correct: Apply proportionate product governance

Use ESMA's proportionality principle: simple, widely distributed, non-complex instruments may use a less granular target market (e.g., "all retail clients with basic investment knowledge"), while structured products, derivatives, and contingent-liability instruments require detailed multi-criteria assessment. [src3]

Counter-Arguments

• The PFOF ban may reduce retail investor access to zero-commission trading: critics argue that banning payment for order flow increases explicit trading costs for retail clients, particularly in markets where PFOF subsidized commission-free brokerage models. Germany's decision to exercise the transitional exemption reflects this concern. [src5]
• Research unbundling harmed SME coverage: the original MiFID II requirement to pay separately for research and execution led to a documented decline in analyst coverage of small-cap companies, which the Listing Act amendments now partially reverse by permitting joint payments again. [src2]
• Proportionality remains insufficiently defined: smaller investment firms argue that MiFID II's one-size-fits-all approach to best execution monitoring and product governance imposes disproportionate costs relative to their risk profile and client base. [src3]

Common Misconceptions

Misconception: MiFID II completely bans all inducements for all investment firms.
Reality: The inducements ban is absolute only for firms providing independent investment advice or portfolio management. Firms providing non-independent advice or execution services may accept inducements if they demonstrably enhance service quality, are disclosed to the client, and do not impair the firm's duty to act in the client's best interest (Article 24(7)-(9) MiFID II). [src1]

Misconception: Transaction reporting is the same as trade reporting / post-trade transparency.
Reality: Article 26 MiFIR transaction reporting is a confidential supervisory report sent to the NCA for market surveillance purposes. Post-trade transparency (Articles 6-11 and 20-21 MiFIR) is public disclosure of executed trade details through APAs or trading venues. They serve different purposes and have different data fields. [src2]

Misconception: The UK still follows EU MiFID II after Brexit.
Reality: The UK onshored MiFID II into domestic law but is now actively diverging. The FCA has independently reformed bond and derivative transparency rules (PS24/14, December 2025), proposed new client categorisation rules (CP25/36), and does not implement EU MiFID III amendments such as the PFOF ban or revised research unbundling. [src2]

Misconception: Systematic internaliser status is determined solely by quantitative thresholds.
Reality: The MiFID II review removed the quantitative test under Article 4(1)(20) for determining SI status. Firms now self-assess whether their OTC dealing is organized, frequent, systematic, and substantial — a qualitative judgment that increases compliance uncertainty. [src2]

Misconception: The double volume cap (DVCap) still governs dark-trading limits under the reference price and negotiated trade waivers.
Reality: The MiFIR review replaced the double volume cap with a single volume cap mechanism (SVCM). The last DVCap reporting day was 31 December 2025; ESMA now publishes SVCM results quarterly using Article 26 transaction-reporting data, removing a separate reporting stream. [src7]

Comparison with Similar Rules

When This Matters

Fetch this when a user asks about EU investment firm compliance obligations, best execution requirements, transaction reporting under MiFIR, inducements rules, product governance for financial instruments, the PFOF ban timeline, or MiFID II vs UK MiFID post-Brexit differences. This unit is essential for any query involving the regulatory framework governing securities markets, investment services, or trading venues in the EU/EEA.