CySEC Consults on Higher CIF Fees While ESMA Signals “System-Level” Digital Supervision
Cyprus and the EU supervision stack both sent a clear signal in mid-January 2026, and it is not just “policy noise”. On 12 January 2026, CySEC opened consultation CP-01-2026 on revising fees for investment firms and market operators, with responses due 13 February 2026 (CySEC consultation paper CP-01-2026). A day later, on 13 January 2026, ESMA published its Digital Strategy 2026–2028, framing a shift toward more data-driven and tool-enabled supervision across EU markets (ESMA Digital Strategy 2026–2028).
For operators, these two items connect in a very practical way. CySEC’s approach pushes you to price your authorisation scope with more discipline, because each service choice has a visible cost footprint. ESMA’s roadmap, meanwhile, points to a supervisory model where evidence quality and data traceability will matter more than polished narratives, especially around reporting logic, outsourcing oversight, and governance of automation and AI-assisted processes.
In this post, we translate both developments into 2026 actions for brokers, CIF groups, and regulated fintech platforms: what to budget, what to document, and what to build so your compliance work produces exportable evidence rather than internal comfort. If you are planning a Cyprus licence build, a scope extension, or a control uplift, we can help you structure the programme around what supervisors can actually test.
Publish Date
04 Mar 2026
Reading Time
11 minutes
Category
Legal News
Jurisdiction
Cyprus
Two moves that change how supervision works in 2026
CySEC’s consultation targets the cost model of supervision in Cyprus. ESMA’s digital strategy targets the operating model of supervision across the EU.
Taken together, the direction is clear. Compliance is shifting from “forms and narratives” toward costed scope plus data-backed evidence.
CySEC CP-01-2026: proposed fee changes for CIFs
On 12 January 2026, CySEC issued Consultation Paper CP-01-2026 on amending fees payable by investment firms and market operators. The consultation deadline stated in the paper is 13 February 2026.
Proposed authorisation fees become more modular by service
CySEC proposes a licensing structure where fees scale by which investment services you apply for. In the consultation paper, a key proposal is:
- €8,000 per investment service for several core Part I services.
- €15,000 for dealing on own account.
- €30,000 for MTF/OTF type services.
This matters operationally. A “broad scope” application becomes a measurable licensing cost decision, not just a future optionality play.
Crypto-related CIF extension: CySEC proposes removal due to MiCA
The consultation also states CySEC proposes removing the standalone crypto-related CIF extension fee, pointing to the shift under MiCA toward a harmonised EU regime for crypto-asset service providers.
For groups planning both investment services and crypto services, this is a governance issue. It pushes you toward a clearer separation of permissions, perimeter, and supervisory expectations.
What firms should do now during the consultation window
Even before final adoption, you can use CP-01-2026 as a planning baseline:
- Model your fee exposure by “must-have” vs “nice-to-have” services.
- Sequence scope: start with the core services you will actually launch, then extend.
- Treat algorithmic activity as a workstream, not a footnote, if it is relevant.
CySEC’s press release frames the consultation as part of adjusting fees for supervised entities.
ESMA Digital Strategy 2026–2028: supervision moves closer to shared systems
On 13 January 2026, ESMA published its Digital Strategy 2026–2028 and explained it alongside an updated data strategy.)
The practical message is not “ESMA likes technology”. It is that supervision increasingly relies on shared platforms, shared analytics, and more consistent data flows.
AI is explicitly part of ESMA’s supervisory roadmap
In the Digital Strategy PDF, ESMA includes actions to roll out AI-driven processes in key functions such as supervision or data analytics. It also references deploying an AI market abuse detection proof-of-concept into production.
For operators, this changes what “good compliance” looks like. You should expect more questions about data quality, lineage, timeliness, and how controls generate evidence.
Reporting is likely to be streamlined, but not necessarily lighter
ESMA’s strategy also points to simplifying and streamlining reporting flows and expanding internal data capabilities. That can reduce duplicative submissions over time. But it also increases pressure on firms to keep clean, consistent datasets and defensible reporting logic.
Practical 2026 checklist for CIFs, brokers, and fintech platforms
Here is what we would treat as immediate priorities:
- Budget and scope discipline: price your authorisation scope, not your marketing roadmap.
- Evidence by design: build monitoring so it produces exportable proof, not screenshots.
- Data lineage mapping: document where your reporting data originates and transforms.
- AI governance: define permitted use cases, approvals, and human oversight now.
- Outsourcing controls: ensure audit rights, incident obligations, and access to logs.
These items are not theoretical. They align with CySEC’s fee direction and ESMA’s “data-first” supervision model.
What we would watch next
- Whether CySEC finalises CP-01-2026 and the effective date of any revised fees.
- Which ESMA digital initiatives become shared tools used by NCAs in supervisory workflows.
If you are planning a Cyprus build, a scope extension, or a control uplift, we can help you structure the plan around what supervisors will actually test.
FAQ About CySEC Fee Shift + ESMA Digital Supervision
What are CySEC’s proposed CIF licensing fees in 2026?
CySEC proposes a more modular authorisation fee structure that scales by investment service, including €8,000 per certain Part I services, €15,000 for dealing on own account, and €30,000 for MTF/OTF services.
Is CySEC removing the crypto-related CIF extension fee because of MiCA?
CySEC’s CP-01-2026 explains that MiCA introduces a harmonised EU regime for crypto-asset services, and proposes removing the standalone crypto-related CIF extension fee.
What is ESMA’s Digital Strategy 2026–2028?
It is ESMA’s roadmap for digitalisation and supervision capabilities, including data-driven supervision and a plan for AI-driven processes in supervision and analytics.
Is ESMA planning to use AI for supervision?
Yes. The Digital Strategy references rolling out AI-driven processes and deploying an AI market abuse detection proof-of-concept into production.
