Around the world, the challenges presented by the MGA model are addressed in a wide variety of ways. In this section of our guide, we consider the diverse approaches taken in the UK, key EEA states, the US, and important markets in the Middle East and Asia Pacific.
We have also summarized our main findings in our comparison table.
Comparison table
This table is intended as a high-level orientation tool only. The answers are necessarily summarised, and important detail, qualifications and jurisdictional nuance cannot be captured in a single cell. Please click on country names for the complete position in each jurisdiction.
| Country | Dedicated MGA category | Average authorisation timeline | Passporting | Insurtech sandbox | Controller approval |
|---|---|---|---|---|---|
| Australia | No | 4-8 months | No | Yes ASIC sandbox |
No Fit & proper assessed |
| Austria | No | 1.5 months | Yes | No Not available to MGAs |
No |
| Belgium | Yes | 3 months | Yes | No Fintech contact point only |
No 10% notification |
| Canada | No | Varies by province | No | No | No Saskatchewan declaration only |
| Denmark | No | 3 months | Yes | Yes FT Lab |
No Notification required |
| Finland | No | 1-3 months | Yes | No | No Notification required |
| France | No | 0.5 months | Yes | Yes ACPR sandbox |
No Notification; directors checked |
| Germany | No | 3-4 months | Yes | No Innovation hub only |
No 10% notification |
| Hong Kong | No | 6 months | No | No | Yes IA controller approval |
| Ireland | No | 6 months | Yes | No Innovation hub only |
No 10% notification |
| Italy | No | 0.5 months | Yes | Yes IVASS sandbox |
No 10% notification |
| Latvia | No | 1 month | Yes | Yes Sandbox |
No Qualifying holding notification |
| Lithuania | No | 0-3 months | Yes | Yes Sandbox |
No 10% notification |
| Luxembourg | No | 3 months | Yes | No | No 10% notification |
| Netherlands | Yes | 3 months | Yes | No Innovation hub only |
Yes AFM fit & proper |
| New Zealand | No | 3-4 months | No | No | No Disqualification checks |
| Poland | No | 1 month | Yes | No | No Post-acquisition notification |
| Portugal | No | 2 months | Yes | No In development |
No |
| Romania | No | 0.5-1 month | Yes | Yes Sandbox |
No 10% notification via insurer |
| Singapore | No | 3-6 months (agent); 6+ months (broker) |
No | No | No |
| Slovenia | No | 1 month | Yes | No | No 10% and foreign investor notification |
| Spain | Yes | 3 months | No | Yes Sandbox |
Yes 10% fit & proper |
| Thailand | No | 1 month | No | Yes OIC sandbox |
No |
| UAE (Dubai) | No | 4-6 months | No | Yes DIFC innovation testing license; ADGM fintech lab |
Yes Fit & proper for controllers |
| United Kingdom | No | Up to 9 months | No | Yes FCA sandbox |
Yes Change-in-control regime |
| United States | No | 6-9 months (nationwide) |
No | No Some state sandboxes |
No |
The absence of a consistent regulatory classification is a fundamental challenge for MGAs operating internationally. Different jurisdictions categorize them variously as brokers, agents, tied intermediaries, or (more rarely) provide for a distinct MGA model.
2.1 Dedicated MGA category in the UK and Europe
2.2 Dedicated MGA category in the Americas
2.3 Dedicated MGA category in Asia Pacific
The Asia Pacific region presents considerable regulatory diversity for MGAs:
2.4 Dedicated MGA category in the Middle East
The time required to obtain MGA authorization varies dramatically across jurisdictions, from as little as two weeks to as long as nine months. Understanding these timeframes is critical for MGAs planning market entry.
3.1 Fast-track jurisdictions
Several European jurisdictions have relatively streamlined authorization processes:
3.2 Medium-timeframe jurisdictions
3.3 Extended-timeframe jurisdictions
Certain jurisdictions impose significantly longer authorization timelines:
A significant regulatory advantages available to MGAs in the EEA is the ability to passport their authorization across member states. Under the IDD, an intermediary authorized in one EEA member state can provide services in other member states on either a freedom of services (FoS) or freedom of establishment (FoE) basis, subject to notification procedures.
4.1 EEA passporting mechanics
FoS passporting allows an MGA to provide cross-border services from its home member state without establishing a physical presence in the host state. FoE passporting permits the establishment of a branch in another member state. The host state may impose certain local conduct-of-business rules but cannot require separate authorization.
4.2 Post-Brexit UK
Following the UK’s departure from the EU, UK-authorized MGAs lost their ability to passport into EEA member states, and vice versa. This has prompted some MGAs to establish EU-based subsidiaries to maintain EEA market access.
4.3 Specific jurisdictional considerations
The intersection of insurance distribution and technology has prompted numerous regulators to establish mechanisms for facilitating innovation, primarily through regulatory sandboxes (time-limited testing environments under relaxed regulatory requirements) and innovation hubs (guidance and engagement without formal regulatory relief).
5.1 Regulatory sandboxes
The following jurisdictions have established formal regulatory sandbox frameworks which may be available to insurtech MGAs:
5.2 Innovation hubs
Innovation hubs provide a less formal mechanism for engaging with regulators – providing points of contact, guidance and support for firms developing innovative fintech and insurtech businesses. Jurisdictions where regulators maintain innovation hubs include Australia, Belgium, Estonia, France, Germany, Ireland, and the Netherlands.
Product oversight and governance (POG) has become one of the most significant regulatory themes affecting MGAs. The IDD established a framework requiring both manufacturers and distributors to implement robust product governance arrangements, including target market identification, product testing, distribution strategy monitoring, and regular product reviews.
6.1 IDD implementation across the EU
The IDD's POG requirements apply to all insurance distributors in the EEA, including MGAs. Product manufacturers must establish, implement, and review a process for approving each insurance product before it’s marketed or distributed. MGAs that design or significantly adapt products are likely to be classified as co-manufacturers, attracting the full range of manufacturer obligations.
Distributors that aren’t manufacturers must obtain sufficient information about the product, understand the identified target market, and ensure products are distributed consistently with the target market’s interests. The allocation of manufacturer versus distributor responsibilities in delegated authority arrangements requires careful contractual delineation.
6.2 UK Consumer Duty
The FCA's Consumer Duty, which came into force in July 2023, goes significantly beyond the IDD's POG framework. The Duty requires firms to deliver good outcomes for retail customers, with specific requirements regarding products and services, price and value, consumer understanding, and consumer support. Products must deliver “fair value.”
The Consumer Duty’s emphasis on value assessment is particularly impactful for MGAs, as it requires demonstrating that the total cost to the customer (including MGA commission and fees) is commensurate with the benefits provided.
6.3 National gold-plating
Many EEA jurisdictions have also "gold-plated" the IDD baseline requirements to a greater or lesser extent – examples include Belgium, where regulators have imposed enhanced value-for-money obligations, and the Netherlands, which since July 2024 has required active transparency from insurance distributors, mandating proactive disclosure of product characteristics, costs, and risks.
Across the EU there has been an increasing focus on whether insurance products distributed through intermediaries deliver adequate value to policyholders.
The handling of premium and claim monies is a critical regulatory consideration for MGAs. Client money rules vary significantly across jurisdictions.
In the UK, the FCA’s CASS rules impose detailed requirements on insurance intermediaries. MGAs who want to handle premium or claims money must enter into risk transfer agreements with insurers under which such monies are held by the MGA as agent for the insurer, protecting clients if the MGA becomes insolvent. Firms that only hold money under risk transfer don’t need FCA permission to hold client money.
Several EEA jurisdictions permit or require similar “risk transfer” mechanisms under the IDD, whereby premiums paid to an MGA are deemed to have been paid to the insurer, so the policyholder is protected in the event of intermediary insolvency. However, IDD allows EEA states to provide for client money to be protected in other ways, including enhanced capital requirements, requirements for segregated client accounts, and guarantee funds.
In the DIFC, the DFSA requires intermediaries to maintain segregated client accounts. The ADGM has similar requirements under the FSRA’s conduct-of-business rules.
Financial protection requirements for MGAs vary considerably across jurisdictions, encompassing professional indemnity insurance (PII), minimum capital requirements, and surety bonds.
8.1 EIOPA alignment and IDD minimums
For the EEA, IDD establishes minimum PII requirements for insurance intermediaries. They must hold PII covering the whole territory of the EU with minimum cover of EUR1,564,610 per claim, and EUR2,315,610 in aggregate per year (as adjusted periodically by EIOPA).
Most developed insurance markets don’t impose specific foreign ownership restrictions on insurance intermediaries. However, several jurisdictions impose controller approval requirements or FDI restrictions that can affect MGA ownership structures.
Thailand stands out as one of the most restrictive jurisdictions. Under the Foreign Business Act, foreign ownership of an insurance brokerage is capped at 50%, requiring local partnership arrangements for international MGA groups.
In most EEA jurisdictions, while there are no nationality-based ownership restrictions, changes of control in regulated intermediaries require prior approval from the relevant supervisory authority. The assessment criteria typically focus on reputation and financial soundness rather than nationality.
In the UK, the FCA applies a change-in-control regime requiring advance notification and approval for the acquisition of significant shareholdings in authorized firms.
In the UAE, the DIFC and ADGM don’t impose foreign ownership restrictions. However, controller approval requirements apply to changes in significant shareholdings.
Consumer protection obligations represent a core pillar of MGA regulation across all jurisdictions surveyed. Common themes include information disclosure duties, suitability or demands-and-needs assessments, conflicts of interest management, and complaints handling.
10.1 Information disclosure
Most jurisdictions require MGAs to disclose key information to customers before the conclusion of an insurance contract, including the intermediary’s identity, regulatory status, the nature of services, and basis of remuneration. The IDD mandates specific pre-contractual disclosures across the EEA.
10.2 Suitability and demands-and-needs
Under the IDD, insurance distributors must carry out a demands-and-needs assessment before proposing a product. Where advice is provided, a personalized recommendation must explain why a particular product best meets the customer’s demands and needs. The UK’s Consumer Duty raises these requirements further.
10.3 Conflicts of interest
The MGA model inherently involves potential conflicts of interest, as the MGA acts on behalf of the insurer while also serving policyholders. Regulators across jurisdictions require MGAs to identify, manage, and disclose conflicts of interest.
10.4 Complaints handling
All jurisdictions surveyed require insurance intermediaries to maintain effective complaints handling procedures. In the UK, the Financial Ombudsman Service provides external dispute resolution. Many EEA jurisdictions have comparable services. In the US, state insurance departments serve as the primary channel for consumer complaints.
The regulatory landscape for MGAs continues to evolve rapidly.
11.1 EIOPA's review of the IDD
EIOPA has undertaken a comprehensive review of the IDD, with proposals that could significantly affect MGAs. Key areas under review include the scope of the value-for-money framework, the treatment of inducements and commissions, and more prescriptive POG requirements.
11.2 Digital distribution and AI
The increasing use of AI and machine learning in underwriting and distribution is attracting regulatory attention. EIOPA has published guidance on the ethical use of AI in insurance. MGAs that rely on AI-driven underwriting models will need to demonstrate transparency, fairness, and accountability.
11.3 Sustainability
Sustainability considerations are increasingly being integrated into insurance regulation. The EU’s Sustainable Finance Disclosure Regulation and related taxonomy requirements affect insurance distributors, requiring disclosure of sustainability risks and consideration of sustainability preferences. MGAs will need to adapt their product governance and distribution processes accordingly.
11.4 Operational resilience
Regulators are placing growing emphasis on operational resilience. The EU’s Digital Operational Resilience Act (DORA), which applied from January 2025, imposes specific requirements on ICT risk management, incident reporting, and third-party risk oversight. MGAs operating in the EU may be directly subject to DORA, or they may be indirectly subject to DORA as critical third parties.
11.5 Convergence and divergence
While international standard-setting bodies such as IAIS and EIOPA promote regulatory convergence, significant divergence remains. Post-Brexit divergence between the UK and the EU is particularly notable, with the UK pursuing its own path on consumer protection, value assessment, and prudential requirements. MGAs operating across multiple jurisdictions must continue to navigate these differences.
This guide reflects our understanding of the law and market practice in each jurisdiction as at July 2026. Regulation in this area continues to evolve and individual jurisdictions may have introduced changes since publication. For advice on a specific jurisdiction, please contact that jurisdiction's key contact, or your usual DLA Piper adviser.