How will new EU and France rules limit the services non-EU banks can provide to EU residents?

CRD VI, CCD2 and the Instant Payments Regulation collectively restrict the ability of non-EU banks to offer lending, deposit-taking, payment services and advisory services to EU-resident clients without appropriate EU licensing or branch authorisation. In France specifically, the ACPR enforces these restrictions, and new overdraft-authorisation rules take effect from 20 November 2026. See the timeline and comparison tables above for a full mapping of affected services.

When will the new rules be enforced in France and what are the key deadlines?

The Instant Payments Regulation has been in force since 9 October 2025. France's CCD2 overdraft-authorisation rules apply from 20 November 2026. CRD VI third-country branch provisions are subject to national transposition, with the European Commission monitoring compliance and initiating infringement proceedings where necessary. Enforcement is expected to intensify from late 2026 into 2027. The transposition table above provides a consolidated timeline.

What immediate compliance steps must cross-border lenders and private banks take?

Within 30 days: convene a board briefing, segment the client book by residency, freeze onboarding for affected products and audit marketing materials. Within 90 days: complete a licensing-gap analysis, draft updated contract clauses and prepare client notifications. Within six months: execute the strategic decision (branch, partner or exit) and complete client migration where required. The full role-based checklist is set out in the practical compliance section above.

Can foreign banks continue to onboard or service French clients remotely?

It depends on the service and the nature of the client relationship. Purely passive servicing in response to an unsolicited client approach may remain permissible in limited circumstances. However, active solicitation, marketing or structured outreach from a non-EU jurisdiction to French residents is increasingly treated as unauthorised activity. Banks that wish to continue servicing French clients remotely should obtain local licensing, establish an EU branch or partner with an EU-licensed institution. Individuals considering how to work remotely from France should also be aware of the residency implications.

Do I need to set up an EU branch to keep servicing clients in France?

Not necessarily, but you need a lawful basis for providing regulated services. Options include establishing a licensed branch in France (or another EU Member State with passporting), partnering with an EU-licensed entity, or restructuring the relationship so that regulated activities are performed by an appropriately authorised institution. The decision tree in the risk mitigation section above walks through each pathway.

Must banks inform affected clients about changes?

Yes. Both regulatory best practice and contractual good faith require that clients be notified in advance of material changes to their service arrangements. A sample client-notice template is provided above. Industry observers expect that regulators will treat proactive client communication as evidence of a responsible compliance approach.

What are the penalties for non-compliance in France?

Penalties can include administrative fines imposed by ACPR, licence revocation or refusal, civil liability for losses arising from the provision of unauthorised services, and referral to criminal authorities in cases of serious regulatory breach. The DGCCRF can also impose consumer-protection penalties under CCD2 transposition measures. The European Commission may pursue infringement proceedings against France if national enforcement is considered insufficient, which in turn increases supervisory pressure on institutions operating in the French market.

Foreign Banks and France in 2026: How New EU Rules Will Limit Services to EU Residents, a Compliance Checklist

A wave of EU legislative measures taking effect between late 2025 and early 2027 is fundamentally reshaping how foreign banks in France may serve clients who are resident in the European Union. Non-EU lenders, private banks and cross-border financial institutions that have historically onboarded and serviced French-resident customers from outside the bloc now face tighter licensing requirements, new consumer-credit obligations and stricter supervisory oversight under the Autorité de contrôle prudentiel et de résolution (ACPR). With France’s transposition of the revised Consumer Credit Directive introducing new overdraft-authorisation rules from 20 November 2026 and CRD VI cross-border lending provisions requiring national implementing measures by late 2026 or early 2027, the compliance window is narrow.

This guide provides the actionable, France-specific compliance checklist that cross-border banks, private-banking teams, compliance officers and in-house counsel need right now.

Executive Summary, Key Obligations and Decisions for Foreign Banks in France

Before diving into the legal detail, compliance officers and senior management should understand six overarching obligations that flow from the new France financial services rules. Each represents a strategic decision that cannot be deferred.

Licensing and authorisation. CRD VI tightens the conditions under which non-EU banks may provide core banking services into the EU without a local licence or authorised branch. Any institution currently relying on reverse-solicitation exemptions or informal passporting arrangements should assess whether those pathways survive under the revised framework.
Branch vs. passporting structure. Banks must decide whether to establish or expand a licensed EU branch, or partner with an EU-licensed entity, to continue serving French-resident clients. The European Commission has signalled through infringement proceedings that it expects Member States to enforce transposition rigorously.
Product restrictions and consumer credit. France’s transposition of Consumer Credit Directive (CCD2) provisions will impose new pre-contractual disclosure, creditworthiness assessment and overdraft-authorisation obligations on any lender extending consumer credit to French residents. Overdraft-authorisation rules take effect from 20 November 2026.
Tax and account-declaration reporting. French tax residents must declare foreign bank accounts to the French tax authorities. Banks holding accounts for French-resident clients bear an indirect compliance burden because clients who fail to declare face penalties, prompting regulatory scrutiny of the bank’s own onboarding and advisory processes.
Instant payments access. Regulation (EU) 2024/886, the Instant Payments Regulation, has been in force since 9 October 2025 for euro-denominated instant payments. Non-EU banks that clear or settle euro payments for French clients must confirm their infrastructure meets the regulation’s requirements.
Marketing and solicitation restrictions. Active marketing of banking products to EU residents from a non-EU jurisdiction triggers local regulatory scrutiny. Banks should audit digital marketing channels, websites and relationship-manager outreach for compliance with French advertising and solicitation rules.

Industry observers expect that the cumulative effect of these measures will force a decisive strategic choice for most non-EU banks within the next six to twelve months: restructure, partner, or exit.

What the New EU Rules Change for Foreign Banks in France

EU Acts That Affect Cross-Border Banking

Three principal legislative instruments drive the changes that non-EU banks in France must address. First, CRD VI (the revised Capital Requirements Directive) introduces new licensing and prudential requirements for third-country branches and firms seeking to provide banking services into the EU, including explicit obligations around cross-border lending compliance. Second, the revised Consumer Credit Directive (CCD2), which France is transposing through national measures, overhauls pre-contractual information requirements, creditworthiness assessments and overdraft rules for consumer lending. Third, the Instant Payments Regulation (Regulation (EU) 2024/886), in force since October 2025, mandates that payment service providers operating in the euro area make instant credit transfers available to customers under specific conditions.

Which Core Services to EU Residents Are Limited

The practical impact on services to EU residents falls across four categories. Lending, extending credit facilities (including lombard lending, mortgage finance and revolving facilities) from a non-EU jurisdiction to French residents, now requires either EU licensing or branch authorisation, absent narrow exemptions. Deposit-taking, accepting deposits from EU-resident clients without a local licence was already restricted; the new framework reinforces enforcement. Payment services, intermediating or settling payments for French clients without compliance with the Instant Payments Regulation and PSD2 successor requirements creates regulatory exposure. Onboarding and advisory services, actively soliciting and onboarding French-resident clients remotely, without local presence or licensing, is increasingly treated as unauthorised cross-border activity by ACPR.

Rule / Instrument	Affected Service	Immediate Impact on Non-EU Banks
CRD VI, third-country branch provisions	Lending, deposit-taking, core banking	Mandatory licensing or branch authorisation to continue servicing EU-resident clients; reverse-solicitation scrutinised
CCD2 transposition (France)	Consumer credit, overdrafts	New pre-contractual disclosure, affordability tests and overdraft-authorisation requirements from 20 Nov 2026
Instant Payments Regulation (EU) 2024/886	Euro payment services	PSPs must offer instant credit transfers; infrastructure and pricing compliance required
ACPR enforcement of marketing and solicitation rules	Client onboarding, advisory, marketing	Active solicitation of French residents from non-EU jurisdictions risks regulatory action

France Banking Regulation Transposition and Enforcement Timeline

Understanding the precise sequence of France banking regulation transposition dates is critical for resource planning. The table below maps each EU instrument to its transposition requirement and, where known, the French enforcement window. Where French implementation dates remain subject to final regulatory publication, this is noted.

EU Act / Instrument	Transposition / EU Deadline	French Enforcement / Known Dates
CRD VI, cross-border lending and third-country branch provisions	Member State transposition required; the European Commission has initiated infringement proceedings against states that have not completed transposition	France: national implementing steps pending final ACPR guidance; enforcement windows are expected in late 2026 to early 2027
Consumer Credit Directive (CCD2), overdraft-authorisation rules	EU adoption completed; Member State transposition windows vary by provision	France: overdraft-authorisation rules apply from 20 November 2026 per Service-public.gouv.fr notice
Instant Payments Regulation (EU) 2024/886	In force from 9 October 2025 for instant payment access obligations	France: applicable to PSPs and banks in France; compliance required since October 2025
ACPR supervisory expectations, cross-border solicitation and licensing	Ongoing, aligned with CRD VI transposition schedule	France: ACPR supervisory reviews and enforcement actions expected to intensify throughout 2026–2027

How French Regulators Will Enforce

Four principal authorities oversee enforcement of the new rules in France. The ACPR (Autorité de contrôle prudentiel et de résolution), supervised by the Banque de France, is the primary banking and insurance supervisor; it will enforce licensing, branch-authorisation and prudential requirements. The DGCCRF (Direction générale de la concurrence, de la consommation et de la répression des fraudes) enforces consumer protection rules, including CCD2 transposition measures. French tax authorities, through the Direction générale des finances publiques, enforce foreign-account declaration obligations. Penalties for non-compliance range from administrative fines and licence revocation to civil liability for improperly marketed or unauthorised services.

The European Commission’s ongoing monitoring of Member State transposition, including published infringement packages, adds a supranational enforcement layer that industry observers expect to sharpen scrutiny of cross-border banks in France.

Practical Compliance Checklist for Foreign Banks in France

This role-based compliance checklist banks can use immediately is the core of this guide. It is organised by function and broken into three time horizons: immediate (0–30 days), short-term (30–90 days) and medium-term (3–6 months). Each action item identifies the responsible team and references the relevant regulatory driver.

Board and Senior Management

Immediate (0–30 days): Convene a board-level briefing on the impact of CRD VI and CCD2 transposition on the institution’s French-client portfolio. Confirm risk appetite for continued cross-border servicing.
Immediate: Mandate a licensing-gap analysis: determine whether existing authorisations (branch licence, passporting arrangement, reverse-solicitation reliance) remain legally viable under the revised framework.
Short-term (30–90 days): Approve a strategic decision, establish or expand an EU branch, partner with an EU-licensed entity, or initiate orderly client migration and exit.
Medium-term (3–6 months): Allocate capital and operational budget for branch establishment or partner onboarding, including ACPR application fees, local staffing and compliance infrastructure.

Legal and Regulatory Team

Immediate: Subscribe to ACPR and European Commission transposition-monitoring alerts. Map all affected client contracts against new CRD VI and CCD2 obligations.
Immediate: Draft or update contract clauses addressing regulatory change, termination rights and jurisdiction. A sample clause is set out in the contract-language section below.
Short-term: Conduct a licence-assessment exercise: document the services currently provided to French residents, identify which services require local authorisation under CRD VI and which fall within any remaining exemptions.
Short-term: Review all consumer-credit documentation against CCD2 pre-contractual disclosure requirements and France’s specific overdraft-authorisation rules effective 20 November 2026.
Medium-term: File branch-licence or partnership applications with ACPR where the strategic decision requires local presence. Prepare notarial documentation for any French-law collateral arrangements.

Compliance and AML

Immediate: Segment the existing client book by residency. Identify all clients who are French tax residents or habitually resident in France, using KYC records and tax-residency self-certifications.
Immediate: Audit marketing materials, website content and relationship-manager outreach for any active solicitation directed at French or EU residents from non-EU jurisdictions.
Short-term: Implement geo-blocking or compliance gating on digital onboarding platforms to prevent new French-resident clients from being onboarded where services require local licensing.
Medium-term: Update AML/KYC procedures to incorporate residency-based service restrictions. Train front-office staff on the distinction between permissible passive servicing and prohibited active solicitation.

Operations, Onboarding and Product Teams

Immediate: Freeze onboarding of new French-resident clients for any product category that requires local licensing under the revised rules, pending legal-team clearance.
Immediate: Prepare client-notification templates (see sample below) for existing French-resident clients, informing them of potential service changes.
Short-term: Build a product-by-product impact matrix listing each service offered to French-resident clients alongside its regulatory status (authorised, restricted, to be discontinued).
Short-term: Develop migration or flight plans for clients who will need to be transferred to an EU-licensed entity or partner institution.
Medium-term: Execute migration for affected client accounts. Confirm that all product documentation (terms and conditions, fee schedules, pre-contractual disclosures) complies with CCD2 and French consumer-protection rules.

Finance and Tax

Immediate: Confirm that the bank’s client-facing communications remind French tax residents of their obligation to declare foreign bank accounts to French tax authorities, as required under French tax law.
Short-term: Review transfer-pricing arrangements for any services, fees or interest flows between the non-EU head office and any existing French branch or subsidiary. Ensure compliance with French transfer-pricing documentation requirements.
Short-term: Assess withholding-tax exposure on interest payments to French-resident borrowers and confirm that appropriate treaty-relief claims or exemptions are being applied.
Medium-term: Align reporting systems with any new ACPR or Banque de France statistical and regulatory reporting requirements applicable to third-country branches. Review implications of France property tax changes for clients holding French real-estate collateral.

Onboarding and Servicing French Residents, What Foreign Banks Can and Cannot Do Remotely

Residency Tests and KYC Thresholds, When Local Presence Is Required

The critical distinction for non-EU banks in France is between passive servicing (responding to an unsolicited approach from a French resident) and active solicitation (marketing, outreach, or structuring services that target French-resident clients). Under the evolving regulatory framework, passive servicing may still be permissible in limited circumstances, but active solicitation of services to EU residents without appropriate licensing is increasingly treated as unauthorised activity. French residency, whether defined by tax domicile, habitual residence or the France immigration rules, triggers the full scope of local consumer-protection and licensing requirements. Banks should use a combination of KYC self-certification, IP-address and correspondence-address checks, and tax-residency documentation (CRS self-certifications) to identify affected clients.

Private Banking France, Wealth Management and Remote Advisory Scenarios

Private banking France operations face particular exposure. High-net-worth clients who maintain residences in multiple jurisdictions may be treated as French-resident for regulatory purposes if their centre of economic interests or habitual abode is in France. Industry observers expect that remote advisory services, portfolio recommendations, investment structuring, credit discussions, conducted from a non-EU jurisdiction and directed at a French-resident client will fall within the scope of the new restrictions unless the bank holds appropriate EU authorisation.

Practical mitigations include establishing a licensed EU branch (in France or another EU Member State with passporting into France), entering a sub-advisory agreement with an EU-licensed wealth manager, or referring French-resident clients to an EU-licensed partner for regulated services while retaining the custodial or booking relationship offshore where still permissible. Each option has distinct licensing, tax and operational implications that require careful legal analysis. For institutions considering establishing a physical presence in France, understanding France works council requirements is also essential for staffing planning.

Cross-Border Lending: Structuring, Collateral and Tax Practicalities

Cross-border lending compliance is one of the most operationally complex areas affected by the new rules. For cross-border banks in France, three issues require immediate attention.

Jurisdictional risk, where the loan is “made.” Under CRD VI, the location at which a loan is deemed to be originated determines the applicable licensing requirement. A loan booked at a non-EU head office but negotiated, documented and disbursed to a French-resident borrower may be treated as having been made in France, triggering local authorisation requirements. Banks should review their origination workflows, term-sheet issuance, credit-committee approval, drawdown mechanics, to determine the regulatory characterisation of each step.

Collateral enforcement in France. French-law security interests, particularly over real estate (hypothèque) and business assets (nantissement de fonds de commerce), require notarial execution and registration. A non-EU lender that takes French-law collateral must work with a French notaire and ensure that enforcement provisions comply with French civil-procedure rules. Contract amendments should include French-law governing-law clauses for collateral packages and acknowledge notarial formalities.

Withholding tax and reporting. Interest payments made by French-resident borrowers to non-EU lenders may be subject to French withholding tax, typically at 25 per cent absent a double-taxation treaty reduction. Banks should confirm treaty eligibility, prepare the relevant French tax forms (typically Cerfa forms for treaty-relief claims) and implement reporting processes that satisfy both French tax-authority and home-jurisdiction requirements.

Sample Contract Language and Client Notice Templates

The following sample clauses are provided for illustrative purposes only and should be reviewed by qualified legal counsel before use.

Sample regulatory-change clause (for inclusion in facility agreements or general terms):

“In the event that any change in applicable law, regulation, directive or regulatory guidance, including but not limited to the implementation of CRD VI, CCD2 or related EU or French national measures, renders the provision of any service under this Agreement unlawful, impracticable, or subject to additional licensing or authorisation requirements, the Bank reserves the right, upon not less than [90] days’ written notice to the Client, to modify, suspend or terminate the affected service. The Bank shall use reasonable endeavours to identify an alternative licensed service provider or to facilitate the orderly transition of the Client’s account.”

Sample client-notice headline and content:

“Important changes to your account, regulatory update. We are writing to inform you that recent changes to European Union and French banking regulations may affect the services we are able to provide to clients resident in the European Union. We are reviewing our service offering and will contact you with specific information about any changes to your account, together with the options available to you, within [60] days.”

These templates should be adapted to the bank’s specific circumstances, service catalogue and jurisdictional analysis. Institutions operating in private banking should also consider whether notices need to address family reunification scenarios that may affect the residency status of connected persons.

Risk Mitigation Playbook, If Your Business Is Affected

The following decision tree provides a simplified framework for senior management at non-EU banks currently servicing French-resident clients:

Do you hold, or can you obtain, an EU branch licence or passportable authorisation? If yes → proceed with branch establishment or expansion. Apply to ACPR (France) or the relevant EU Member State authority and passport into France.
If branch establishment is not feasible → evaluate partnership with an EU-licensed institution. Structure a referral, sub-advisory or white-label arrangement that transfers regulated activities to the licensed partner.
If neither branch nor partnership is viable → initiate orderly client migration. Issue client notices, assist with account transfers to an EU-licensed institution and wind down affected services within the transposition enforcement window.
In all cases → immediately cease active solicitation of new French-resident clients for services that require local licensing. Document the decision-making process for regulatory-audit purposes.

Early indications suggest that regulators will treat a documented, good-faith compliance programme more favourably than belated reactive measures taken after enforcement action begins.

Conclusion

The regulatory landscape for foreign banks in France has shifted decisively. The convergence of CRD VI, CCD2 and the Instant Payments Regulation creates a narrow compliance window that demands immediate action from non-EU banks, cross-border lenders and private-banking teams serving French-resident clients. The practical steps are clear: assess licensing, segment clients, update contracts and execute a strategic decision, branch, partner or exit, before enforcement intensifies in late 2026 and into 2027. Institutions that act now will be best positioned to preserve client relationships and avoid regulatory sanctions in the evolving framework governing foreign banks in France.

Need Legal Advice?

This article was produced by Global Law Experts. For specialist advice on this topic, contact Philippe Buerch at Clarelis Avocats , a member of the Global Law Experts network.