Industrial Policy & Trade Monitor· 2665 actions· ✨ 90 recent

Ethiopia's Banking Business Proclamation No. 1360/2025, ratified by the House of Peoples' Representatives on 17 December 2024 and gazetted in March 2025, repeals Proclamation 592/2008 and opens Ethiopia's banking sector to foreign participation for the first time since the 1974 Derg-era nationalisations. Foreign banks may enter via subsidiary establishment, branch licensing, representative offices, or equity acquisition in existing domestic banks. A single strategic foreign investor is capped at 40% ownership per domestic bank, with aggregate foreign ownership across all investors capped at 49%. The reform positions Ethiopia — Africa's second-most-populous country — as a competitor to Nairobi, Lagos, and Johannesburg as an African banking centre, unlocking entry plans by Standard Bank, KCB Group, Equity Bank, ABSA, and GCC-based institutions.

The Ethiopian Capital Market Authority (ECMA) issued Directive No. 1009/2024 on 16 July 2024, establishing the comprehensive licensing, operational, and supervisory framework for securities exchanges, derivatives exchanges, and the over-the-counter (OTC) market under the authority of Article 108 of the Capital Market Proclamation No. 1248/2021. The directive consolidates Ethiopia's previously fragmented securities-trading architecture into a single, licensed, and regulated market structure and provided the statutory pathway for the Ethiopian Securities Exchange (ESX) to receive the country's first securities-exchange licence. This is the first capital-markets architecture filing for Ethiopia on the IPTM register, forming the operating- licence layer alongside the banking-sector liberalisation enacted under Proclamation 1360/2025.

FinCEN issued a final rule under Section 311 of the USA PATRIOT Act (31 U.S.C. § 5318A) prohibiting US covered financial institutions from opening or maintaining a correspondent account for, or on behalf of, Iraq-based Al-Huda Bank, a foreign financial institution found to be of primary money-laundering concern. Treasury determined that Al-Huda Bank exploited its access to US dollars to support designated Foreign Terrorist Organizations including Iran's Islamic Revolutionary Guard Corps (IRGC) and IRGC-Quds Force, as well as Iran-aligned Iraqi militias Kata'ib Hizballah and Asa'ib Ahl al-Haq. The rule also imposes a special-due-diligence requirement on US covered institutions to guard against indirect access via foreign correspondent accounts. Published in the Federal Register on July 3, 2024; effective August 2, 2024.

OFAC final rule (FR Doc 2024-11618, 89 FR 46518) amending the Cuban Assets Control Regulations at 31 CFR Part 515 to further implement the May 2022 Biden administration policy of expanded support for the Cuban people. The rule reinstates the "U-turn" general license (authorizing US banks to process funds transfers that originate and terminate outside the US, neither originator nor beneficiary a US person); replaces "self-employed individual" with the broader "independent private sector entrepreneur" (covering Cuban private businesses up to 100 employees, including private cooperatives); authorizes Cuban nationals in the private sector and located in Cuba to open and operate accounts at US financial institutions (including via online/mobile banking); and expands authorizations for internet-based services to support Cuban civil society and private-sector entrepreneurs. Effective 29 May 2024.

Presidential Decree No. 442 of 23 May 2024 establishes a special judicial-administrative procedure by which the Russian Federation or the Central Bank of the Russian Federation can claim, before a Russian court, that an "unjustified deprivation" of Russian sovereign property has been effected by a state body or judicial authority of the United States — and, on a court finding to that effect, receive equivalent-value US-affiliated property located in Russia (real assets, securities issued by Russian companies, cash held in Russian bank accounts, and other property rights) by way of compensation. The mechanism is an explicit reciprocal counter-instrument to the US REPO for Ukrainians Act (Title II of H.R.815, signed 24 April 2024) authorising US executive confiscation of immobilised Russian sovereign assets in US jurisdiction. The decree is structurally extensible: by separate presidential decision, the same procedure may be applied to any other state Russia designates as "unfriendly". Implementing procedural acts and amendments to Russian legislation were required to be adopted by 23 September 2024.

Three Commission Delegated Regulations (CDR 2024/1772, 1773, 1774) adopted 13 March 2024 and published in the EU Official Journal on 25 June 2024 constitute the first batch of binding Level 2 implementing rules under DORA (Regulation (EU) 2022/2554). CDR 2024/1772 sets ICT incident classification criteria and materiality thresholds for mandatory reporting; CDR 2024/1773 specifies the required content of contractual policies for ICT third-party services supporting critical or important functions; CDR 2024/1774 defines the ICT risk management tools, methods, processes, and policies — including a simplified framework for smaller in-scope entities. All three apply from 17 January 2025 alongside the parent DORA regulation, covering approximately 22,000 EU regulated financial entities.

On 21 February 2024, President Shavkat Mirziyoyev signed Presidential Decree DP-37 approving the 2024 State Program for the Implementation of the "Uzbekistan-2030" Strategy under the slogan "Year of Support for Youth and Business". The decree converts the parent Uzbekistan-2030 doctrine (DP-158 of 11 September 2023) into binding annual execution targets covering SOE privatisation and IPO programmes (Navoi MMC, Almalyk MMC, Uzbekistan National Investment Fund), industrial localisation, sectoral investment lines, "green economy" and water-management benchmarks, and youth-business support measures. DP-37 functions as the master annual operationalisation instrument for Uzbekistan's 2024 industrial and investment policy stack, anchoring the downstream subsoil recodification (LRU-987, Oct 2024) and critical-minerals national programme (March 2025).

Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities, published OJ L 333, 27 December 2022, entered into force 16 January 2023, with Member State transposition deadline 17 October 2024 (rules applicable from 18 October 2024). The CER Directive repeals Council Directive 2008/114/EC on European Critical Infrastructures, extending the scope from two sectors (energy, transport) to eleven essential-service sectors: energy, transport, banking, financial market infrastructures, health, drinking water, wastewater, digital infrastructure, public administration, space, and food. Member States must adopt national resilience strategies, conduct risk assessments at least every four years, identify "critical entities" providing essential services whose disruption would have significant cross-border impacts, and ensure those entities implement technical, security, and organisational resilience measures, business-continuity plans, incident-reporting obligations, and personnel-security background checks. The CER Directive is the physical and hybrid resilience twin to the NIS2 Directive (2022/2555) — the two instruments form the binding EU critical-infrastructure-protection architecture replacing the 2008/114/EC regime.

Regulation (EU) 2022/2554 (Digital Operational Resilience Act, DORA) is the EU's first horizontal cyber- and ICT-resilience instrument for the financial sector. Adopted 14 December 2022 and published in the Official Journal on 27 December 2022, it entered into force on 16 January 2023 and applies from 17 January 2025. DORA covers approximately 22,000 EU regulated financial entities across ~20 entity types (credit institutions, insurers, investment firms, CCPs, trading venues, crypto-asset service providers, etc.) under five pillars: ICT risk management, ICT-incident reporting, digital operational resilience testing (including threat-led penetration testing for significant entities), ICT third-party risk management, and information sharing. Structurally novel, DORA establishes the Critical ICT Third-Party Provider (CTPP) oversight regime under which the European Supervisory Authorities (EBA, ESMA, EIOPA) acquire direct supervisory powers over hyperscale cloud providers (AWS, Azure, GCP, Oracle) servicing EU financial entities — the first EU mechanism for ESA direct oversight of non-financial cloud providers.

Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), published OJ L 333, 27 December 2022, entered into force 16 January 2023. NIS2 repeals and substantially expands the 2016 NIS1 Directive (2016/1148), extending the scope from ~7 sectors to 18 enumerated essential and important sectors, imposing binding cybersecurity risk- management and incident-reporting obligations on covered entities, introducing board-level management accountability, and mandating Member State transposition by 17 October 2024. NIS2 is the structural EU statutory anchor for national cybersecurity frameworks across the bloc, operating alongside DORA (Reg 2022/2554) for financial-sector digital resilience and CRA (Reg 2024/2847) for product cybersecurity.

The Wet veiligheidstoets investeringen, fusies en overnames ("Vifo Act") is the Netherlands' cross-sector statutory FDI screening regime. Adopted by the States-General on 18 May 2022 (Stb. 2022, 215) and entered into force on 1 June 2023 together with two implementing decrees (Stb. 2023, 173 — main implementing decree; Stb. 2023, 172 — decree defining the scope of "sensitive technology"), the Act establishes mandatory pre-closing notification and a security review by the Bureau Toetsing Investeringen (BTI, part of the Ministry of Economic Affairs and Climate) for transactions affecting (i) "vital providers" in critical infrastructure sectors — energy, transport, telecoms, port operators, banking infrastructure — and (ii) Dutch undertakings active in "sensitive technology", defined to include EU Reg 2021/821 Annex I dual-use items, military goods, and additional national-security technologies. The regime applies retrospectively to transactions completed after 8 September 2020. It is the foundational instrument under which the Dutch national export-control measures on ASML DUV immersion lithography (filed: 2023-06-30 and 2024-09-07) operate, and the Dutch peer of US CFIUS, EU Regulation 2019/452, the German AWG §§55-62, the French Décret 2014-479 / R. 151-1 et seq., and the UK NSI Act 2021.

Between 22 and 28 February 2022 — coinciding with Russia's full-scale invasion of Ukraine — OFAC issued a Financial Services Sectoral Determination and four directives under Executive Order 14024 of April 15, 2021. Together they authorise designation of any person operating in Russia's financial sector, prohibit US persons from trading Russian sovereign debt, bar US banks from maintaining correspondent accounts for designated Russian financial institutions (Sberbank, Alfa-Bank and others), prohibit new investment in certain Russia-related entities, and block all transactions involving the Central Bank of the Russian Federation, the National Wealth Fund, and the Ministry of Finance — effectively freezing approximately USD 640 billion in Russian sovereign reserves held in Western financial systems. The package was formally published in the Federal Register on 31 May 2022.

FinCEN amended 31 CFR Part 1010 to remove civil penalty language that had become obsolete following the American Jobs Creation Act of 2004 (AJCA). The AJCA restructured FBAR (Report of Foreign Bank and Financial Accounts) penalties, raising the maximum for willful violations beyond what the pre-existing regulation text authorised, creating an inconsistency between statute and regulation. The final rule is administrative in nature: it deletes superseded penalty provisions and aligns regulatory text with the statutory penalty structure already in force since 2004, imposing no new obligations on FBAR filers.

On 8 October 2020, the US Treasury's Office of Foreign Assets Control (OFAC) determined that section 1(a)(i) of Executive Order 13902 (10 January 2020) applies to the financial sector of the Iranian economy, exposing non-US persons that operate in or knowingly facilitate significant transactions with that sector to secondary sanctions. Concurrently, OFAC designated eighteen Iranian banks (sixteen under E.O. 13902, one as an owned-or-controlled affiliate, and Hekmat Iranian Bank under E.O. 13382 non-proliferation authority). After a 45-day wind-down, the secondary-sanctions exposure became effective on 22 November 2020. The determination was formally republished in the Federal Register on 1 October 2025 (FR Doc 2025-19123) under Trump 2.0's maximum-pressure restoration; the underlying economic measure dates to the 2020 action.

Qatar's Amir Sheikh Tamim bin Hamad Al Thani promulgated Law No. (1) of 2019 on 7 January 2019, replacing Law No. 13 of 2000 and authorising non-Qatari investors to hold up to 100% equity in Qatari enterprises across all economic sectors, subject to executive regulations. The law provides national-treatment guarantees, protects against expropriation except for public purpose with fair compensation, and permits full repatriation of investment income and capital. Banking, insurance, and commercial agencies remain subject to sector-specific ownership caps unless exempted by the Council of Ministers.

Tanzania's Parliament enacted Act No. 5 of 2017, the Natural Wealth and Resources (Permanent Sovereignty) Act, as part of a landmark resource-nationalism legislative trio (alongside Act No. 6 on unconscionable contract renegotiation and Written Laws Miscellaneous Amendments No. 7), signed into law by President John Magufuli on 4 July 2017. The Act vests all of Tanzania's natural wealth and resources — minerals, oil and natural gas, fisheries, wildlife, forestry, water, and related sub-surface assets — as the permanent and inalienable property of the People of the United Republic, held in trust by the President on their behalf. Key operative provisions prohibit international commercial arbitration of natural-resource disputes (mandating adjudication within Tanzanian courts under Tanzanian law), empower Parliament to review and require renegotiation of any natural-resource arrangement containing "unconscionable terms," impose an in-country banking rule on earnings from natural wealth extraction, and authorise statutory override of contractual stabilisation clauses embedded in pre-2017 mining development agreements. The Act is the foundational parent statute underpinning all subsequent Tanzanian mining-sector reform, including the 2024 Written Laws (Miscellaneous Amendments) (No. 4) Act critical/strategic minerals classification and the 2025 Finance Act mining amendments.

The International Emergency Economic Powers Act of 1977 (IEEPA, Title II of Pub. L. 95-223, 91 Stat. 1626, codified at 50 U.S.C. §§ 1701–1708) was signed by President Carter on 28 December 1977 and grants the President sweeping authority to declare a national emergency with respect to "any unusual and extraordinary threat, which has its source in whole or substantial part outside the United States, to the national security, foreign policy, or economy of the United States" — and then to investigate, regulate, direct, compel, nullify, void, prevent, or prohibit any transaction in, or involving, foreign exchange, banking transfers, importing, exporting, or dealings in property by persons subject to US jurisdiction. IEEPA is the parent enabling statute for every OFAC-administered autonomous sanctions program (Russia, Iran, DPRK, Venezuela, Cuba, Syria, Belarus, Myanmar, cyber, Global Magnitsky, Hong Kong, ICC, and others) as well as the legal basis for the entire Trump-era IEEPA-tariff regime (EO 14193–14195 fentanyl tariffs, Canada/Mexico/China; EO 14257 reciprocal-tariff framework; EO 14323 Brazil; EO 14380 Cuba; EO 14382 Iran; and the US-India interim tariff agreement). Between 1977 and 2025 Presidents invoked IEEPA in 77 national-emergency declarations; of these, 7+ directly parent IPTM-filed implementing actions, with ~dozens of OFAC SDN designation actions tracing their legal root to this statute.