MiFID II 2026: Key Deadlines and Corporate Access Compliance Guide

Why 2026 Is a Pivotal Year for MiFID II Compliance

2026 matters for MiFID II compliance because three separate regulatory clocks converge in the same twelve months: a 2024 legislative package, a September 2025 transposition deadline, and a run of application dates landing in March, April, and August 2026. No single change is dramatic on its own, but the cumulative effect forces firms to revisit corporate access pricing, market-data contracts, and compliance-function documentation at the same time.

The MiFID II/MiFIR review isn’t a rewrite. It’s a course correction to a framework that’s been operating since January 2018. The original directive banned bundled research and access payments; the review tightens transparency around market data, streamlines some reporting burdens, and gives supervisors sharper tools for reviewing compliance functions. If you run a corporate access desk, sit on a buy-side trading floor, or manage an IR calendar, the practical question isn’t whether the ban on paying for access is still in force. It is. The question is whether your documentation would hold up if a regulator asked to see it tomorrow.

The MiFID II/MiFIR Review: What Changed and When

The MiFIR Review regulation and the MiFID II Review directive were published in the Official Journal on 8 March 2024. The MiFIR portion applies directly across EU member states, while the MiFID II directive required national transposition by 28 September 2025. An amending Commission Delegated Regulation then entered into force on 23 November 2025, and several provisions, including revised transparency requirements, apply from 2 March 2026, with most remaining provisions taking effect by 16 April 2026.

That’s four dates in roughly seventeen months, which is exactly why ESMA has told market participants not to wait for every technical standard to be finalized before adjusting internal processes. The regulator has explicitly urged firms to anticipate the 2 March 2026 transparency changes ahead of full implementation, a signal that supervisory patience for “we’re still waiting on guidance” answers is thin.

The policy intent behind the review, as set out in the European Commission’s original 2021 proposal, was to improve market-data transparency and availability, level the playing field between trading venues, and keep EU market infrastructure competitive against other jurisdictions. Corporate access isn’t named directly in that mandate, but it sits downstream of nearly every lever the review pulls: how data is priced, how compliance functions are supervised, and how firms document that services aren’t being bundled in ways that function as inducements.

Corporate Access and the Inducement Rules: Still Separate, Still Scrutinized

The ban on paying for corporate access through dealing commissions has been in force in the UK since June 2014, predating MiFID II itself, and MiFID II’s 2018 inducement regime extended that logic across the EU by banning most monetary and non-monetary benefits tied to client services unless research is paid from the firm’s own resources or through a properly governed research payment account.

The 2024-2026 review doesn’t touch this foundation. What it does is raise the evidentiary bar. FCA Handbook rules under COBS 2.3A-2.3C already require brokers to price and supply execution separately from research and other services, with pricing that can’t be influenced by execution volumes. The FCA’s multi-firm review of research unbundling reforms has flagged an ongoing concern: as research budgets compress, some firms may lean more heavily on corporate access as an unpriced, informally arranged service that functions as a de facto inducement even when no line item says so.

That’s the trap. A roadshow slot arranged as a favor, an analyst-hosted call offered without a corresponding invoice, an access grant that tracks suspiciously with trading flow, none of these require intent to look like an inducement breach. They just require a lack of a paper trail. Full-access research packages from large sell-side firms have historically carried price tags in the USD 10,000 to 30,000 range, according to data cited by ComplySci, which underscores how much value corporate access has in aggregate, and how exposed a firm is if that value changes hands without documented, separate pricing.

Market Data, RCB, and the Cost of Access-Related Analytics

ESMA formally withdrew its prior guidelines on MiFID II/MiFIR market-data obligations to make room for a new regulatory technical standard on “reasonable commercial basis” (RCB) pricing. The withdrawn guidelines had required standardized publication templates, full audit transparency in market-data licence agreements, and free access to delayed data for all customers, including professional users.

For corporate access and events teams, this matters more than it looks at first glance. Attendance analytics, meeting-request data, and access-related reporting tools increasingly sit adjacent to market-data commercialization, and firms that license or resell any data derived from trading or execution activity need to track which RCB regime applies to their contracts. Providers authorized before 23 November 2025 have a transition window running until 22 August 2026 to align existing contracts with the new RTS on RCB, according to Broadridge’s regulatory tracking. Miss that window and a data-licensing arrangement that was compliant in 2025 could be non-compliant in 2026 without a single line of the underlying service changing.

The practical takeaway: if your corporate access platform, CRM, or events system generates data products that get shared, licensed, or monetized outside your own investment decision-making, treat August 2026 as a hard contract-review deadline, not a soft one.

Compliance Function Expectations: What Supervisors Will Be Looking For

ESMA’s updated guidelines on MiFID II compliance function requirements, which replace 2012-era guidance, direct national competent authorities to actively review how firms plan, implement, and maintain their compliance obligations as part of ongoing supervision, not just at initial authorization. The guidelines take effect two months after publication in all EU official languages, per CMS Law’s summary of the release.

The operational shift here is subtle but important: regulators can now treat an inadequately resourced or poorly organized compliance function as grounds to question a firm’s authorization itself, not just issue a finding after the fact. For corporate access specifically, this means a compliance officer needs to be able to answer, on request, who approved a given roadshow or non-deal roadshow arrangement, what it was priced at, how that price was determined, and whether the same terms were offered consistently across similar counterparties.

Firms that still run corporate access through email threads, shared spreadsheets, and verbal sign-off from a desk head are the ones most exposed here. Not because the arrangements are necessarily improper, but because “we’re pretty sure this was fine” is not evidence a supervisor can review.

Key 2026 Deadlines at a Glance

Four dates anchor the 2026 compliance calendar for MiFID II/MiFIR: 23 November 2025 (delegated regulation in force), 2 March 2026 (transparency provisions apply), 16 April 2026 (broader application date for transposed rules), and 22 August 2026 (RCB contract transition deadline). Each date triggers a different operational review.

What Sell-Side, Buy-Side, and IR Teams Should Do Now

Each seat in the corporate access chain has a distinct exposure point in 2026, and each has a distinct fix that doesn’t require waiting for further guidance.

Sell-side corporate access and events teams should audit whether every roadshow, conference slot, and management meeting has a documented price, an approval record, and consistent terms across similar clients. If pricing decisions currently live in someone’s head or a Slack thread, that’s the gap a supervisor will find first. Buy-side compliance and trading teams should cross-check corporate access consumption against research payment account records to confirm access isn’t correlating with execution flow in a way that looks like an informal inducement. IR teams at public companies should keep their own log of which brokers arranged which meetings, when, and under what terms, both to protect against being pulled into a sell-side firm’s compliance gap and to have leverage when negotiating access terms directly.

Across all three groups, the common thread is the same: a trackable, timestamped, auditable record of who requested access, who approved it, what it cost, and how that cost was determined. That’s not a new requirement invented by the 2026 review, it’s the same requirement MiFID II set in 2018, now facing sharper enforcement scrutiny because the compliance-function guidelines give regulators explicit permission to ask for it during routine supervision, not just after a complaint.

Closing: Access Remains, But the Paper Trail Matters More Than Ever

Nothing in the 2024-2026 MiFID II/MiFIR review reopens the door to bundled, informal corporate access. The core ban, in place in the UK since 2014 and across the EU since 2018, stays exactly where it was. What’s changed is the supervisory expectation around evidence: market-data contracts need to reflect the new RCB regime by August 2026, compliance functions need to demonstrate active oversight rather than passive policy documents, and transparency obligations tightening in March and April 2026 raise the general bar for how firms show their work.

Firms that already treat corporate access as a separately priced, logged, and reviewable service will find 2026 to be a compliance non-event. Firms still running access informally will find that the gap between “probably fine” and “documented and defensible” is exactly where supervisory attention is heading next.

advertising@topicintelligence.ai

See Full Bio