Industrial Policy & Trade Monitor· 2662 actions· ✨ 89 recent

On 18 November 2025, the European Supervisory Authorities (EBA, ESMA, and EIOPA) jointly designated 19 Critical ICT Third-Party Providers (CTPPs) under DORA Article 31, with immediate effect — the first-ever exercise of direct EU financial-regulator supervision over hyperscale cloud and infrastructure providers. The designated entities include Amazon Web Services, Microsoft Azure, Google Cloud, Deutsche Telekom, Oracle, SAP, IBM, Bloomberg LP, London Stock Exchange Group (LSEG), Tata Consultancy Services, and Orange, among others. Designation triggers direct oversight by a lead ESA (EBA for banking-critical, ESMA for capital-markets-critical, EIOPA for insurance-critical) via Joint Examination Teams (JETs), with powers to conduct investigations, carry out on-site inspections, and impose fines of up to 1% of average daily worldwide turnover per day for non-compliance.

On 29 October 2025, Brazil's national development bank BNDES, through its capital-markets subsidiary BNDESPAR, launched a public call ("Chamada Pública para Seleção de Fundos de Investimento em Índice de Mercado") to invest up to BRL 1 billion (~USD 187 million) across up to five exchange- traded index funds (ETFs). Each selected fund can receive up to BRL 200 million, capped at 50% of the fund's total assets, split across three equity ETFs, one fixed-income ETF and one hybrid-strategy ETF. Proposals were due 5 December 2025; five funds were subsequently selected, three of them explicitly thematic — infrastructure, clean energy, and a "strategic sectors" index — turning a capital-markets liquidity instrument into a channel for directing state development-bank capital toward BNDES's industrial-policy priorities.

Commission Delegated Regulation (EU) 2025/532, adopted 24 March 2025 and published in the Official Journal on 2 July 2025, supplements DORA (Regulation (EU) 2022/2554) with binding Regulatory Technical Standards governing ICT subcontracting of critical or important functions. It requires all EU-regulated financial entities to establish a subcontracting policy, conduct due-diligence and concentration-risk assessments at each tier of the ICT supply chain (including nth-party providers), impose equivalent resilience standards on sub-ICT-providers, and maintain enforceable termination and information-access rights. The RTS entered into force on 22 July 2025, completing the second-batch DORA implementing acts on outsourcing chains.

The Ethiopian Capital Market Authority (ECMA) issued Directive No. 1009/2024 on 16 July 2024, establishing the comprehensive licensing, operational, and supervisory framework for securities exchanges, derivatives exchanges, and the over-the-counter (OTC) market under the authority of Article 108 of the Capital Market Proclamation No. 1248/2021. The directive consolidates Ethiopia's previously fragmented securities-trading architecture into a single, licensed, and regulated market structure and provided the statutory pathway for the Ethiopian Securities Exchange (ESX) to receive the country's first securities-exchange licence. This is the first capital-markets architecture filing for Ethiopia on the IPTM register, forming the operating- licence layer alongside the banking-sector liberalisation enacted under Proclamation 1360/2025.

President Biden signed Executive Order 14105 on 9 August 2023, "Addressing United States Investments in Certain National Security Technologies and Products in Countries of Concern", establishing the first dedicated US outbound-investment screening regime. The EO directs Treasury to prohibit or require notification of US investments in Chinese (and Hong Kong, Macau) entities engaged in three categories of technology: (1) semiconductors and microelectronics, (2) quantum information technologies, (3) artificial intelligence systems. After a public-comment process, Treasury issued the final rule (31 CFR Part 850) on 28 October 2024, effective 2 January 2025.