PART 3

Key global insights across borders

1. Introduction

Around the world, the challenges presented by the MGA model are addressed in a wide variety of ways. In this section of our guide, we consider the diverse approaches taken in the UK, key EEA states, the US, and important markets in the Middle East and Asia Pacific.

We have also summarized our main findings in our comparison table. 

Comparison table

This table is intended as a high-level orientation tool only. The answers are necessarily summarised, and important detail, qualifications and jurisdictional nuance cannot be captured in a single cell. Please click on country names for the complete position in each jurisdiction.

Country Dedicated MGA category Average authorisation timeline Passporting Insurtech sandbox Controller approval
Australia No 4-8 months No Yes
ASIC sandbox
No
Fit & proper assessed
Austria No 1.5 months Yes No
Not available to MGAs
No
Belgium Yes 3 months Yes No
Fintech contact point only
No
10% notification
Canada No Varies by province No No No
Saskatchewan
declaration only
Denmark No 3 months Yes Yes
FT Lab
No
Notification required
Finland No 1-3 months Yes No No
Notification required
France No 0.5 months Yes Yes
ACPR sandbox
No
Notification;
directors checked
Germany No 3-4 months Yes No
Innovation hub only
No
10% notification
Hong Kong No 6 months No No Yes
IA controller approval
Ireland No 6 months Yes No
Innovation hub only
No
10% notification
Italy No 0.5 months Yes Yes
IVASS sandbox
No
10% notification
Latvia No 1 month Yes Yes
Sandbox
No
Qualifying holding notification
Lithuania No 0-3 months Yes Yes
Sandbox
No
10% notification
Luxembourg No 3 months Yes No No
10% notification
Netherlands Yes 3 months Yes No
Innovation hub only
Yes
AFM fit & proper
New Zealand No 3-4 months No No No
Disqualification checks
Poland No 1 month Yes No No
Post-acquisition notification
Portugal No 2 months Yes No
In development
No
Romania No 0.5-1 month Yes Yes
Sandbox
No
10% notification
via insurer
Singapore No 3-6 months (agent);
6+ months (broker)
No No No
Slovenia No 1 month Yes No No
10% and foreign investor notification
Spain Yes 3 months No Yes
Sandbox
Yes
10% fit & proper
Thailand No 1 month No Yes
OIC sandbox
No
UAE (Dubai) No 4-6 months No Yes
DIFC innovation testing license; ADGM fintech lab
Yes
Fit & proper for controllers
United Kingdom No Up to 9 months No Yes
FCA sandbox
Yes
Change-in-control regime
United States No 6-9 months
(nationwide)
No No
Some state sandboxes
No

2. Classification of MGAs

The absence of a consistent regulatory classification is a fundamental challenge for MGAs operating internationally. Different jurisdictions categorize them variously as brokers, agents, tied intermediaries, or (more rarely) provide for a distinct MGA model. 

2.1 Dedicated MGA category in the UK and Europe

In the UK, an MGA must either be directly authorized by the Financial Conduct Authority (FCA) or operate as an Appointed Representative (AR) under the umbrella of an FCA-authorized principal firm. MGAs placing business at Lloyd’s also have to hold Coverholder status, which is granted by Lloyd’s and requires compliance with Lloyd’s minimum standards. The FCA doesn’t recognize “MGA” as a distinct regulatory category; rather, MGAs fall within the broad class of insurance intermediaries.

Austria doesn’t have a dedicated MGA category. MGAs must be licensed as either insurance agents or insurance brokers, depending on the relationship with the insurer(s) and degree of independence from any single carrier. As well as representing policyholders, a broker can underwrite on behalf of multiple insurers and would also be entitled to manage claims. An insurance agent acts exclusively for one insurer, which is liable for the acts and omissions of the agent.

Belgium recognizes “mandated underwriters” (gevolmachtigde onderschrijvers / mandataires) as a distinct intermediary category, authorized and supervised by the Financial Services and Markets Authority (FSMA). 

Denmark doesn’t have a dedicated MGA category. Insurance intermediaries, including those performing MGA functions, must register as insurance agents or insurance brokers with the Danish FSA.

Estonia classifies insurance intermediaries as either Insurance Broker Companies (IBCs) or Insurance Agent Companies (IACs), supervised by the Estonian FSA. IACs aren’t permitted to offer similar products from multiple insurers.

IBCs are prohibited from binding insurers or making underwriting decisions, but they can enter into cooperation agreements on operational aspects such as invoicing, IT systems, data protection, and communications.

There is no dedicated MGA category. For MGA-type operations, the IBC model is generally preferred, in an “MGA-lite” model. IBCs cannot make underwriting decisions on behalf of insurers, but their operational capabilities allow them to approximate some MGA functions.

In Finland, entities performing MGA functions operate as insurance agents under the supervision of the Finnish FSA. There is no dedicated MGA classification. Agents operate under delegated authority from the insurer they represent. Finnish MGAs acting as agents act exclusively for insurers and cannot also act for policyholders.

There is no dedicated regulatory category for MGAs, so MGAs must register either as insurance brokers or insurance agents with ORIAS. Most MGAs choose to register as brokers, even though they actually represent the interests of the insurer rather than the policyholder. 

In Germany, MGA operations typically fall under the insurance agent classification, as agents act on behalf of and with the authority of one or more insurers, and are indirectly supervised by BaFin through its oversight of the insurers they represent.

An MGA may conduct regulated distribution activities without being licensed if it operates as a “tied agent” and conducts its activities exclusively on behalf of one or, if the insurance products are non-competitive, several insurance companies authorized to conduct insurance business in Germany. The insurance company or companies must assume unlimited liability for the tied agent’s distribution activities.

In Ireland, MGAs are classified as insurance intermediaries authorized by the CBI. The same authorization framework applies to MGAs as to other insurance intermediaries. 

MGAs must register in section “A” of the IVASS Registry. MGAs must comply with the same registration requirements as traditional agents, including professional qualifications and continuing education. Italian regulation requires strict separation between agent and broker roles, so an agent registered in Section A cannot simultaneously act as a broker (registered in Section E).

Like Estonia, Latvia’s insurance intermediary framework distinguishes between IBCs and IACs. An IBC operates independently and can arrange insurance with multiple insurers, while IACs aren’t permitted to offer similar products from multiple insurers.

Lithuania’s insurance intermediary framework also distinguishes between IBCs and IACs. IBCs can act on behalf of insurers and are entitled to carry out insurance distribution activities on behalf of either the insurer or the policyholder, and may distribute similar products of multiple insurers. However, the IBC must always act in the best interests of the policyholder. By contrast, an IAC may only act on behalf of and in the interests of one insurer.

In Luxembourg, MGAs are licensed by the CAA. They must be authorized as an insurance intermediary (broker or insurance agency), or registered as an ancillary insurance intermediary.

The Netherlands recognizes a specific category of gevolmachtigde agenten (authorized agents) who operate under delegated authority from insurers and are supervised by the AFM. The Dutch regime also provides for a collective license system, under which groups of related entities can operate under a shared authorization framework. 

Poland's insurance intermediary framework, supervised by the KNF, categorizes MGAs as either tied agents (acting for a single insurer) or multi-agents (who represent multiple insurers simultaneously). 

Portugal classifies MGAs as insurance agents under the supervision of the ASF. Insurance agents act on behalf of insurers and are authorized to distribute insurance products and, where delegated authority is granted, to bind cover on the insurer’s behalf.

Romania classifies MGAs as insurance agents under the supervision of the Romanian Financial Supervisory Authority. Romania also offers an appointed representative option for insurers operating on a Freedom of Services basis, which allows EEA insurers to work with local MGAs.

Agencias de suscripciĂłn (underwriting agencies) have traditionally been considered as the equivalent of MGAs under Spanish law and need prior regulatory authorization from the DGS. 

However, insurance agents (agentes de seguros, either legal entities or individuals), can, in practice, due to the flexibility of the distribution regime, undertake many of the typical activities associated with MGAs. These agents can carry out their activities on an exclusive or non-exclusive basis and must be registered with the DGS. 

2.2 Dedicated MGA category in the Americas

There is no specific MGA authorization framework at the federal level, and MGAs typically operate under licensing frameworks applicable to insurance agents and brokers in each province. Specific MGA authorization is, however, required in the province of Saskatchewan, making it a notable exception.

The insurance regulatory framework is state-based. Under a model law (Model Act) developed by the National Association of Insurance Commissioners (NAIC), an MGA only needs to be licensed as an “insurance producer.” Insurance intermediaries must obtain a producer license in each state where they conduct business. There are, however, some states that require a separate MGA license in certain circumstances.

2.3 Dedicated MGA category in Asia Pacific

The Asia Pacific region presents considerable regulatory diversity for MGAs:

Australia doesn't have a dedicated regulatory category for MGAs. Entities performing MGA functions must hold an Australian Financial Services Licence (AFSL) issued by the Australian Securities and Investments Commission (ASIC), or operate as an authorized representative of an AFSL holder. 

Hong Kong also doesn’t have a dedicated MGA category. Entities performing MGA functions are licensed as insurance agencies. An insurance agency can represent a maximum of four insurers for general insurance, and a maximum of two for long-term insurance. 

New Zealand also doesn’t have a specific licensing regime for MGAs. Firms operating as MGAs may need to register on the Financial Services Providers Register, depending on the nature and scope of their activities. If an MGA provides “financial advice” to retail clients it may also need to be licensed as a Financial Advice Provider (FAP), or be an “authorized body” of another FAP. 

Singapore doesn't have a specific regulatory classification for MGAs. They can register as Authorized Reinsurance Brokers (ARBs) or General Insurance Agents (GIAs), or obtain a full broker license from the MAS. The choice of registration category depends on the scope of the MGA’s activities and its relationship with capacity providers.

Thailand doesn’t have specific legislation governing MGAs. The insurance intermediary framework provides for two categories: insurance agents and insurance brokers. Agent licenses are restricted to natural persons, meaning that corporate entities must obtain a broker license.

2.4 Dedicated MGA category in the Middle East

The UAE doesn't have an onshore MGA regime. MGA-type operations are conducted through two separate free-zone regulatory frameworks: the Dubai International Financial Centre, regulated by the DFSA, and the Abu Dhabi Global Market, regulated by the FSRA. Each regime has its own authorization requirements, regulatory standards and supervisory approach. DIFC and ADGM require MGAs to have an “Insurance Management” license, and allow combined MGA/broking licenses.

3. Licensing and authorization

The time required to obtain MGA authorization varies dramatically across jurisdictions, from as little as two weeks to as long as nine months. Understanding these timeframes is critical for MGAs planning market entry.

3.1 Fast-track jurisdictions

Several European jurisdictions have relatively streamlined authorization processes:

Registration with ORIAS can be completed in approximately two to three weeks. The process is primarily administrative, focusing on verification of professional qualifications and insurance coverage.

IVASS registration in section A typically takes two to three weeks.

The Bank of Latvia processes applications within approximately 30 days.

The KNF processes intermediary registrations within approximately 30 days.

The ASF must decide an application within 60 days from submission (or, if the file isn’t considered complete, 60 days from the date of submission of the requested documentation or clarifications).

Authorization from the ASF typically takes two to four weeks.

Singapore (insurance agent): Registration with the ARB can be completed within three to five days, although the GIA insurer member would likely impose their own vetting procedures before making the application, which may take three to six months. 

Insurance agent or broker licenses are issued upon completion of the requisite training and test. For legal persons seeking a broker license it may take a few weeks longer as the OIC must approve the company’s objectives (which takes seven days) and the directors must pass the requisite test.

3.2 Medium-timeframe jurisdictions

The FMA typically requires approximately six weeks to process intermediary authorizations.

Authorization in Belgium typically takes approximately three months.

The Danish FSA processes applications within approximately 90 days.

Authorization in Estonia typically takes approximately three months.

Authorization in Finland typically takes approximately three months.

Authorization in Lithuania typically takes approximately three months.

The CAA processes intermediary registrations within approximately 90 days.

A FAP license will generally take 3-4 months to obtain.

Singapore Lloyd's Asia coverholder: To be registered as a Lloyd’s Asia coverholder, an application has to be submitted by a Lloyd’s Asia service company. Similar to the case of an insurance agent, while the registration with Lloyd’s Asia may take less than a month, the service company may impose their own vetting or review procedures before making the application, which may take three to six months.

The authorization process for insurance intermediaries in Spain typically takes approximately two to three months from submission of a complete application.

3.3 Extended-timeframe jurisdictions

Certain jurisdictions impose significantly longer authorization timelines:

Licensing and registration with the local IHK usually takes three to four months and may be delayed where foreign professional qualifications need to be recognized.

The IA’s licensing process typically requires approximately six months.

CBI authorization typically takes approximately six months.

Singapore (broker): An application to the MAS will likely take six months or more, subject to the regulator’s case load.

In the ADGM, the process from application to final approval typically takes four to six months. In the DIFC, it typically takes four to five months.

FCA authorization for directly authorized firms can take up to nine months. The process involves detailed assessment of the applicant’s business model, governance, financial resources, and fitness and propriety of key personnel. The AR route can be faster but shifts supervisory responsibility to the principal firm.

4. EEA passporting and cross-border access

A significant regulatory advantages available to MGAs in the EEA is the ability to passport their authorization across member states. Under the IDD, an intermediary authorized in one EEA member state can provide services in other member states on either a freedom of services (FoS) or freedom of establishment (FoE) basis, subject to notification procedures.

4.1 EEA passporting mechanics

FoS passporting allows an MGA to provide cross-border services from its home member state without establishing a physical presence in the host state. FoE passporting permits the establishment of a branch in another member state. The host state may impose certain local conduct-of-business rules but cannot require separate authorization.

4.2 Post-Brexit UK

Following the UK’s departure from the EU, UK-authorized MGAs lost their ability to passport into EEA member states, and vice versa. This has prompted some MGAs to establish EU-based subsidiaries to maintain EEA market access. 

4.3 Specific jurisdictional considerations

German regulators have expressed discomfort with reverse branching arrangements, where non-EEA firms establish branches in EEA jurisdictions primarily to access the German market through passporting.

Gibraltar-authorized firms benefited from transitional arrangements post-Brexit, given Gibraltar’s unique constitutional relationship with the UK, and have continuing rights to access the UK market.

Hong Kong doesn’t participate in any passporting regime. There are no automatic cross-border rights, and entities must obtain local licensing.

New Zealand doesn’t participate in any passporting regime. MGAs must obtain separate authorizations in each jurisdiction where they wish to operate.

Singapore doesn’t participate in any passporting regime. MGAs must obtain separate authorizations in each jurisdiction where they wish to operate, though Singapore’s extensive network of bilateral agreements and its position as a leading financial center help facilitate cross-border activities.

Insurance agents can exercise EEA passporting rights but Spanish agencias de suscripcion cannot passport their services to other EEA states. This can require restructuring for MGAs seeking to use Spain as a base for EEA-wide operations.

Thailand doesn’t participate in any passporting regime. Intermediaries must obtain separate authorizations in each foreign jurisdiction.

The DIFC and ADGM don’t participate in any mutual recognition or passporting regime. MGAs authorized in these jurisdictions must obtain separate authorization in each additional market they wish to access.

There is no passporting regime in the US. Each state is a separate licensing jurisdiction, and a license in one state does not grant rights to operate in another.

5. Insurtech and regulatory sandboxes

The intersection of insurance distribution and technology has prompted numerous regulators to establish mechanisms for facilitating innovation, primarily through regulatory sandboxes (time-limited testing environments under relaxed regulatory requirements) and innovation hubs (guidance and engagement without formal regulatory relief).

5.1 Regulatory sandboxes

The following jurisdictions have established formal regulatory sandbox frameworks which may be available to insurtech MGAs:

ASIC operates an enhanced regulatory sandbox that allows eligible fintech and regtech businesses to test certain financial services without an AFSL for up to 24 months.

The FMA operates a regulatory sandbox. However, as MGAs aren’t supervised by the FMA (they’re supervised by an Austrian district administrative authority or home state supervisor if passporting into Austria), the sandbox isn’t currently available to MGAs.

The Danish FSA operates the FT Lab for testing innovative financial services concepts.

There is no specific insurtech regime, however the ACPR has launched a regulatory sandbox.

IVASS has introduced a sandbox framework to support insurtech innovation.

Both Latvia and Lithuania states have established sandbox frameworks.

Both Latvia and Lithuania states have established sandbox frameworks.

Romania and Spain have both introduced sandbox frameworks, though these are at earlier stages of development compared to, for example, the FCA’s sandbox.

Romania and Spain have both introduced sandbox frameworks, though these are at earlier stages of development compared to, for example, the FCA's sandbox.

The OIC has introduced a regulatory sandbox to support insurtech development.

The DIFC operates the Insurance Technology License (ITL) for testing innovative products, and the ADGM has its own fintech lab with similar objectives. Both provide reduced regulatory requirements during the testing phase.

The FCA's regulatory sandbox was one of the first globally and has supported numerous insurtech propositions.

There is no federal insurtech regulatory sandbox. Several individual states have, however, enacted their own sandbox legislation.

5.2 Innovation hubs

Innovation hubs provide a less formal mechanism for engaging with regulators – providing points of contact, guidance and support for firms developing innovative fintech and insurtech businesses. Jurisdictions where regulators maintain innovation hubs include Australia, Belgium, Estonia, France, Germany, Ireland, and the Netherlands. 

6. Product oversight and governance

Product oversight and governance (POG) has become one of the most significant regulatory themes affecting MGAs. The IDD established a framework requiring both manufacturers and distributors to implement robust product governance arrangements, including target market identification, product testing, distribution strategy monitoring, and regular product reviews.

6.1 IDD implementation across the EU

The IDD's POG requirements apply to all insurance distributors in the EEA, including MGAs. Product manufacturers must establish, implement, and review a process for approving each insurance product before it’s marketed or distributed. MGAs that design or significantly adapt products are likely to be classified as co-manufacturers, attracting the full range of manufacturer obligations.

Distributors that aren’t manufacturers must obtain sufficient information about the product, understand the identified target market, and ensure products are distributed consistently with the target market’s interests. The allocation of manufacturer versus distributor responsibilities in delegated authority arrangements requires careful contractual delineation.

6.2 UK Consumer Duty

The FCA's Consumer Duty, which came into force in July 2023, goes significantly beyond the IDD's POG framework. The Duty requires firms to deliver good outcomes for retail customers, with specific requirements regarding products and services, price and value, consumer understanding, and consumer support. Products must deliver “fair value.”

The Consumer Duty’s emphasis on value assessment is particularly impactful for MGAs, as it requires demonstrating that the total cost to the customer (including MGA commission and fees) is commensurate with the benefits provided.

6.3 National gold-plating

Many EEA jurisdictions have also "gold-plated" the IDD baseline requirements to a greater or lesser extent – examples include Belgium, where regulators have imposed enhanced value-for-money obligations, and the Netherlands, which since July 2024 has required active transparency from insurance distributors, mandating proactive disclosure of product characteristics, costs, and risks.

Across the EU there has been an increasing focus on whether insurance products distributed through intermediaries deliver adequate value to policyholders.

7. Premium handling and client money rules

The handling of premium and claim monies is a critical regulatory consideration for MGAs. Client money rules vary significantly across jurisdictions.

In the UK, the FCA’s CASS rules impose detailed requirements on insurance intermediaries. MGAs who want to handle premium or claims money must enter into risk transfer agreements with insurers under which such monies are held by the MGA as agent for the insurer, protecting clients if the MGA becomes insolvent. Firms that only hold money under risk transfer don’t need FCA permission to hold client money.

Several EEA jurisdictions permit or require similar “risk transfer” mechanisms under the IDD, whereby premiums paid to an MGA are deemed to have been paid to the insurer, so the policyholder is protected in the event of intermediary insolvency. However, IDD allows EEA states to provide for client money to be protected in other ways, including enhanced capital requirements, requirements for segregated client accounts, and guarantee funds.

In the DIFC, the DFSA requires intermediaries to maintain segregated client accounts. The ADGM has similar requirements under the FSRA’s conduct-of-business rules.

8. Capital and professional indemnity requirements

Financial protection requirements for MGAs vary considerably across jurisdictions, encompassing professional indemnity insurance (PII), minimum capital requirements, and surety bonds.

8.1 EIOPA alignment and IDD minimums

For the EEA, IDD establishes minimum PII requirements for insurance intermediaries. They must hold PII covering the whole territory of the EU with minimum cover of EUR1,564,610 per claim, and EUR2,315,610 in aggregate per year (as adjusted periodically by EIOPA).

For licensees with total revenue from financial services provided to retail clients of AUD2 million or less, the minimum cover is AUD2 million for any one claim and in aggregate. Otherwise, the limit should be approximately equal to actual or expected revenue from retail financial services (up to AUD20 million).

As an alternative to complying with the IDD PII requirements, insurance agents can provide a guarantee of cover from an insurer they are working with exclusively, which fulfills the same terms as the statutorily required insurance.

The IA doesn’t impose mandatory minimum PII requirements on insurance agencies, though PII is strongly encouraged.

There is no mandatory PII requirement for insurance intermediaries, although industry bodies recommend it.

In addition to IDD-aligned PII requirements, Portugal imposes a minimum share capital requirement of EUR5,000, with a minimum own assets requirement of EUR2,500.

An insurance broker registered with the MAS must have minimum paid-up share capital of SGD300,000. A GIA-registered agent must have minimum capital of SGD25,000. Brokers must maintain PII under the Insurance Act 1966.

Insurance brokers must maintain paid-up capital of THB3 million. No mandatory PII requirement is imposed by the OIC.

The FSRA requires insurance intermediaries to maintain minimum capital of USD10,000 (on an expenditure basis) and PII coverage.

The DFSA requires insurance intermediaries to maintain minimum capital of USD30,000 (on an expenditure basis) and PII coverage.

FCA capital requirements depend on whether the firm holds client money. Firms that don’t hold client money must maintain as a minimum the higher of GBP5,000 or 2.5% of annual income. Firms that hold client money must maintain a minimum of the higher of GBP10,000 or 5% of annual income. PII is required for all FCA-authorized insurance intermediaries.

Rather than PII, many US states require MGAs to maintain surety bonds, typically in the range of USD100,000 to USD500,000.

9. Foreign ownership and FDI restrictions

Most developed insurance markets don’t impose specific foreign ownership restrictions on insurance intermediaries. However, several jurisdictions impose controller approval requirements or FDI restrictions that can affect MGA ownership structures.

Thailand stands out as one of the most restrictive jurisdictions. Under the Foreign Business Act, foreign ownership of an insurance brokerage is capped at 50%, requiring local partnership arrangements for international MGA groups.

In most EEA jurisdictions, while there are no nationality-based ownership restrictions, changes of control in regulated intermediaries require prior approval from the relevant supervisory authority. The assessment criteria typically focus on reputation and financial soundness rather than nationality.

In the UK, the FCA applies a change-in-control regime requiring advance notification and approval for the acquisition of significant shareholdings in authorized firms.

In the UAE, the DIFC and ADGM don’t impose foreign ownership restrictions. However, controller approval requirements apply to changes in significant shareholdings.

10. Consumer protection and conduct of business

Consumer protection obligations represent a core pillar of MGA regulation across all jurisdictions surveyed. Common themes include information disclosure duties, suitability or demands-and-needs assessments, conflicts of interest management, and complaints handling.

10.1 Information disclosure

Most jurisdictions require MGAs to disclose key information to customers before the conclusion of an insurance contract, including the intermediary’s identity, regulatory status, the nature of services, and basis of remuneration. The IDD mandates specific pre-contractual disclosures across the EEA.

10.2 Suitability and demands-and-needs

Under the IDD, insurance distributors must carry out a demands-and-needs assessment before proposing a product. Where advice is provided, a personalized recommendation must explain why a particular product best meets the customer’s demands and needs. The UK’s Consumer Duty raises these requirements further.

10.3 Conflicts of interest

The MGA model inherently involves potential conflicts of interest, as the MGA acts on behalf of the insurer while also serving policyholders. Regulators across jurisdictions require MGAs to identify, manage, and disclose conflicts of interest.

10.4 Complaints handling

All jurisdictions surveyed require insurance intermediaries to maintain effective complaints handling procedures. In the UK, the Financial Ombudsman Service provides external dispute resolution. Many EEA jurisdictions have comparable services. In the US, state insurance departments serve as the primary channel for consumer complaints.

11. Forward-looking regulatory trends

The regulatory landscape for MGAs continues to evolve rapidly.

11.1 EIOPA's review of the IDD

EIOPA has undertaken a comprehensive review of the IDD, with proposals that could significantly affect MGAs. Key areas under review include the scope of the value-for-money framework, the treatment of inducements and commissions, and more prescriptive POG requirements.

11.2 Digital distribution and AI

The increasing use of AI and machine learning in underwriting and distribution is attracting regulatory attention. EIOPA has published guidance on the ethical use of AI in insurance. MGAs that rely on AI-driven underwriting models will need to demonstrate transparency, fairness, and accountability.

11.3 Sustainability

Sustainability considerations are increasingly being integrated into insurance regulation. The EU’s Sustainable Finance Disclosure Regulation and related taxonomy requirements affect insurance distributors, requiring disclosure of sustainability risks and consideration of sustainability preferences. MGAs will need to adapt their product governance and distribution processes accordingly.

11.4 Operational resilience

Regulators are placing growing emphasis on operational resilience. The EU’s Digital Operational Resilience Act (DORA), which applied from January 2025, imposes specific requirements on ICT risk management, incident reporting, and third-party risk oversight. MGAs operating in the EU may be directly subject to DORA, or they may be indirectly subject to DORA as critical third parties.

11.5 Convergence and divergence

While international standard-setting bodies such as IAIS and EIOPA promote regulatory convergence, significant divergence remains. Post-Brexit divergence between the UK and the EU is particularly notable, with the UK pursuing its own path on consumer protection, value assessment, and prudential requirements. MGAs operating across multiple jurisdictions must continue to navigate these differences.

This guide reflects our understanding of the law and market practice in each jurisdiction as at July 2026. Regulation in this area continues to evolve and individual jurisdictions may have introduced changes since publication. For advice on a specific jurisdiction, please contact that jurisdiction's key contact, or your usual DLA Piper adviser.