Comisión Nacional del Mercado de Valores (CNMV)

Overview

The Comision Nacional del Mercado de Valores (CNMV), known in English as the National Securities Market Commission, is Spain's independent securities market supervisory authority responsible for regulating and overseeing the Spanish securities markets, investment firms, collective investment schemes, crowdfunding platforms, and — since the application of MiCA — crypto-asset service providers. Established in 1988 through Law 24/1988 (the Securities Market Act), the CNMV operates as an autonomous public-law entity under the political responsibility of the Ministry of Economy, Commerce and Enterprise, while maintaining operational and decisional independence in regulatory and enforcement matters.

Current President: Carlos San Basilio Pardo, appointed on December 23, 2024.

Current Vice-President: Paloma Marin Bona, appointed on December 23, 2024.

Spain operates a twin-peaks regulatory model in financial services. The Banco de Espana (Bank of Spain) handles banking prudential supervision, payment institution licensing, and payment systems oversight, while the CNMV handles securities market regulation, investment firm supervision, investor protection, and — critically under MiCA — crypto-asset service provider authorization. This division means that for payment-related activities, the Bank of Spain is the primary authority, but for crypto-asset trading, custody, and exchange services (non-payment crypto services), the CNMV is the competent authority under MiCA. Understanding which regulator covers which scope is essential for companies seeking to operate in Spain's financial services sector.

The CNMV is headquartered in Madrid at Calle Edison 4, with an additional office in Barcelona. The organization employs approximately 400-500 staff across supervision, enforcement, market surveillance, licensing, and policy divisions. The CNMV supervises approximately 200+ investment firms, 2,000+ collective investment scheme vehicles, the Bolsas y Mercados Espanoles (BME) trading infrastructure (now part of SIX Group), and a growing number of crypto-asset service providers transitioning to the MiCA framework.

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Securities Markets and Trading Infrastructure

The CNMV is the primary regulator of Spain's securities markets and market infrastructure. Spain's market infrastructure is operated by Bolsas y Mercados Espanoles (BME), which has been part of the SIX Group (Swiss financial infrastructure) since 2020. Key functions include:

• Stock Exchange Oversight — Supervision of the four Spanish stock exchanges (Madrid, Barcelona, Bilbao, Valencia) operating under BME, including market conduct, trading rules, and transparency requirements

• Regulated Markets and MTFs — Oversight of regulated markets, multilateral trading facilities (MTFs), organized trading facilities (OTFs), and systematic internalizers operating in Spain

• Market Surveillance — Real-time monitoring of trading activity for market abuse, insider trading, and market manipulation through sophisticated surveillance systems

• Pre-Trade and Post-Trade Transparency — Enforcement of MiFID II transparency requirements for equity and non-equity instruments traded on Spanish venues

• Securities Issuance and Prospectuses — Review and approval of prospectuses for public offerings and admissions to trading, in accordance with the EU Prospectus Regulation

• Corporate Disclosures — Monitoring of periodic financial reporting, inside information disclosures, and significant shareholding notifications by listed companies

The CNMV maintains the Official Register of Securities and Issuers (Registro Oficial de Valores y Emisores), which is the authoritative source for information on all listed securities in Spain.

Investment Firm Regulation

The CNMV authorizes and supervises investment firms (empresas de servicios de inversion) providing services in Spain under the MiFID II framework. Key activities include:

• Investment Firm Authorization — Licensing of broker-dealers, portfolio managers, financial advisors, and other MiFID II investment service providers

• Conduct-of-Business Supervision — Enforcement of suitability requirements, best execution obligations, conflicts of interest management, inducements rules, and product governance standards

• Cross-Border Services Oversight — Monitoring of EU/EEA firms providing services into Spain under passporting and third-country firm access arrangements

• Product Intervention Measures — Authority to restrict or prohibit the marketing, distribution, or sale of certain financial instruments, including CFDs, binary options, and leveraged products

• Investor Compensation Scheme — Oversight of the Fondo de Garantia de Inversiones (FOGAIN), which protects investors in the event of investment firm insolvency

Collective Investment Schemes

The CNMV supervises Spain's collective investment scheme industry, which includes one of Europe's largest fund distribution markets. Key functions include:

• UCITS Management Company Authorization — Licensing and supervision of UCITS management companies domiciled in Spain

• Alternative Investment Fund Managers (AIFM) — Authorization and oversight of AIFMs managing hedge funds, private equity funds, real estate funds, and venture capital vehicles

• Fund Registration and Prospectus Review — Registration of collective investment schemes and review of fund documentation

• Fund Distribution Oversight — Supervision of fund distribution channels, including banks, independent advisors, and digital platforms

• Venture Capital and Closed-End Funds — Regulation of entidades de capital riesgo (venture capital entities) and other closed-end fund structures

Spain hosts approximately EUR 600-700 billion in collective investment scheme assets under management, making it one of the larger fund markets in the EU.

Crypto-Asset Service Provider (CASP) Authorization under MiCA

Since the full application of the Markets in Crypto-Assets Regulation (MiCA) on December 30, 2024, the CNMV has assumed the role of competent authority for the authorization of crypto-asset service providers in Spain. This is one of the CNMV's most significant new mandates. Key activities include:

• CASP Authorization — Processing of MiCA license applications for entities providing crypto-asset services including crypto-asset exchange, custody, transfer, trading, advisory, and portfolio management services

• Transition Period Management — Spain opted for the maximum MiCA transition period, giving existing registered VASPs until July 1, 2026 to obtain full MiCA authorization or cease operations — a comply-or-quit regime

• Pre-MiCA Registration Legacy — Before MiCA, the CNMV maintained a voluntary advertising registration regime for crypto-asset advertisers and the Bank of Spain maintained a VASP register. Under MiCA, the CNMV is the unified competent authority for non-payment crypto services

• Supervisory Framework Development — The CNMV has been developing its CASP supervisory framework in coordination with ESMA, including organizational requirements, governance standards, and investor protection measures

• Crypto-Asset White Paper Review — Authority to review and potentially object to crypto-asset white papers for tokens other than asset-referenced tokens (ARTs) and electronic money tokens (EMTs)

The CNMV has publicly communicated that firms are expected to apply early for MiCA authorization, as the July 1, 2026 deadline is a hard cutoff with no extensions.

Crowdfunding Platform Regulation

The CNMV supervises crowdfunding service providers operating in Spain under EU Regulation 2020/1503 on European crowdfunding service providers for business. Key functions include:

• Crowdfunding Platform Authorization — Licensing of equity and lending-based crowdfunding platforms under the harmonized EU framework

• Investor Protection Standards — Enforcement of investor suitability assessments, investment limits for non-sophisticated investors, and platform disclosure requirements

• Coordination with Banco de Espana — Joint supervision with the Bank of Spain for lending-based crowdfunding platforms

Prior to the EU Crowdfunding Regulation, Spain regulated crowdfunding through the Ley de Fomento de la Financiacion Empresarial (LFFE), which established the Plataformas de Financiacion Participativa (PFP) framework under CNMV supervision.

Audit Oversight and Financial Reporting

The CNMV monitors financial reporting compliance for listed companies and exercises audit oversight functions:

• Financial Reporting Oversight — Review of IFRS compliance in annual and interim financial reports of listed companies

• Audit Committee Supervision — Monitoring of audit committee effectiveness and auditor independence for public interest entities

• Corporate Governance Codes — Issuance of the Code of Good Governance for Listed Companies and monitoring of comply-or-explain disclosures

Recent Developments (2025-2026)

MiCA July 2026 Deadline: The CNMV has communicated a clear comply-or-quit message to crypto firms: obtain MiCA authorization by July 1, 2026, or stop offering crypto-asset services in Spain. This positions Spain as one of the stricter enforcers of MiCA transition timelines.

CASP Application Processing: The CNMV has encouraged entities seeking authorization to apply early to allow sufficient time for review processes and supervisory dialogue before the hard deadline.

ESMA Grandfathering Coordination: ESMA's updated list of grandfathering periods across EU Member States confirmed Spain's July 1, 2026 deadline, mitigating cliff-edge risks for firms operating across borders.

AIFMD II Transposition: Spain must transpose AIFMD II into national law by April 16, 2026, introducing updated requirements for alternative investment fund managers.

Regulatory Powers

The CNMV possesses comprehensive administrative enforcement authority:

• Administrative Fines — Authority to impose fines for very serious infractions up to the greater of EUR 10 million, five times the profit obtained, or 10% of annual turnover; serious infractions up to EUR 5 million or two times the profit obtained

• License Suspension or Revocation — Power to withdraw authorization of investment firms, fund managers, CASPs, and crowdfunding platforms

• Product Intervention — Authority to restrict or prohibit specific financial instruments, products, or practices that pose risks to investor protection or market integrity

• Trading Suspensions — Power to suspend trading in specific securities or on specific venues

• Public Warnings and Investor Alerts — Publication of warnings about unauthorized entities and potentially harmful products

• Prohibition Orders — Authority to bar individuals from management positions in regulated entities

• Market Manipulation and Insider Trading Sanctions — Investigation and sanctioning of market abuse under the EU Market Abuse Regulation (MAR)

• On-Site Inspections — Power to conduct on-site examinations of regulated entities, including access to books, records, and electronic systems

• Corrective Orders — Binding directives requiring supervised entities or listed companies to take specific remedial actions within defined timescales

• Interim Measures — Power to adopt precautionary measures during the course of investigation proceedings, including temporary activity suspensions

• Website Blocking Orders — Authority to request judicial cooperation to block access to websites offering unauthorized financial services to Spanish investors

• Cross-Border Enforcement Cooperation — Authority to share supervisory information and coordinate enforcement actions with foreign regulators under bilateral and ESMA multilateral cooperation frameworks

• Referral to Criminal Authorities — Obligation to refer matters involving potential criminal offenses (serious insider trading, market manipulation, fraud) to the Spanish courts and prosecution services

The CNMV publishes an annual enforcement report detailing the number and type of sanctions imposed, enforcement proceedings initiated, and investor complaints resolved. Recent enforcement priorities have focused on unauthorized crypto-asset service provision, market abuse in smaller-cap listed companies, and MiFID II conduct-of-business violations.

Regulatory Role and Function

President: Carlos San Basilio Pardo (appointed December 23, 2024)

Vice-President: Paloma Marin Bona (appointed December 23, 2024)

Organization Structure:

• Directorate-General of Markets (Market Supervision, Trading Infrastructure, Post-Trade)

• Directorate-General of Entities (Investment Firm Supervision, Fund Manager Supervision, CASP Authorization)

• Directorate-General of Strategic Policy and International Affairs

• Directorate-General of Legal Services

• Department of Investor Complaints and Inquiries

• Department of Financial Reporting and Corporate Governance

• Department of Research and Statistics

• Internal Audit Department

Physical Address:

Comision Nacional del Mercado de Valores (CNMV)

Calle Edison 4

28006 Madrid

Spain

Barcelona Office:

Passeig de Gracia 19

08007 Barcelona

Spain

Telephone: +34 91 585 1500

Website: https://www.cnmv.es

Key Contact Points:

• General Inquiries: [Available through official website — Contact section]

• Investor Complaints: [Available through CNMV investor portal]

• CASP/MiCA Authorization: [Available through official website]

• Market Supervision: [Available through official website]

• International Cooperation: [Available through official website]

Legal Foundation

The CNMV operates under a comprehensive Spanish legislative framework and European regulatory frameworks:

• Ley del Mercado de Valores (Securities Market Act) — Law 6/2023 of March 17 — The current consolidated securities market legislation, replacing the original Law 24/1988 that established the CNMV. This law defines the CNMV's organization, powers, functions, and scope of authority over securities markets and investment services

• Original Establishment Law — Law 24/1988 of July 28 — The original Securities Market Act that created the CNMV as part of Spain's financial market modernization; subsequently superseded by Law 6/2023

• Laws 37/1998 and 44/2002 — Significant amendments that updated and expanded the CNMV's powers and responsibilities

• Regulation (EU) 2023/1114 — Markets in Crypto-Assets (MiCA) — Directly applicable EU regulation designating the CNMV as the competent authority for CASP authorization in Spain for non-payment crypto-asset services

• Regulation (EU) No 600/2014 — MiFIR and Directive 2014/65/EU — MiFID II — The EU framework for securities markets and investment firm regulation, transposed into Spanish law

• Regulation (EU) No 596/2014 — Market Abuse Regulation (MAR) — Framework for market abuse prevention, with the CNMV as the competent authority for enforcement

• Regulation (EU) 2017/1129 — Prospectus Regulation — Securities issuance and prospectus approval authority for the CNMV

• Regulation (EU) 2020/1503 — European Crowdfunding Service Providers Regulation — Framework for crowdfunding platform authorization, with the CNMV as competent authority

• Ley de Fomento de la Financiacion Empresarial (Law 5/2015) — The Spanish business financing promotion law that originally established the domestic crowdfunding regulation framework

• Real Decreto 217/2008 — Royal Decree on the legal regime of investment services firms, implementing MiFID requirements

• Real Decreto 1310/2005 — Royal Decree on prospectus requirements for public offerings (now largely superseded by the EU Prospectus Regulation)

• Anti-Money Laundering Law (Law 10/2010) — AML/CFT framework applicable to CNMV-supervised entities

• Regulation (EU) 2022/2554 — Digital Operational Resilience Act (DORA) — Requirements for ICT risk management applicable to investment firms and market infrastructure supervised by the CNMV

• Royal Decree-Law 7/2021 — Transposition of EU Directive 2019/1937 on whistleblower protection, establishing internal reporting channels for CNMV-supervised entities

• CNMV Circular 1/2022 — Circular on advertising of crypto-assets presented as investment objects, establishing prior notification requirements for mass crypto-asset advertising campaigns in Spain — a significant pre-MiCA regulatory measure that positioned the CNMV as an early mover on crypto advertising regulation

The CNMV also implements various ESMA Guidelines and Technical Standards through national application, maintaining alignment with EU supervisory convergence objectives across securities markets, investment services, and crypto-asset regulation.

Licensing and Authorization Relevance

The CNMV licenses and authorizes the following categories of financial services entities:

Payments and Money Movement Relevance

The CNMV has limited direct payments relevance compared to the Banco de Espana, but several functions intersect with money movement:

Payment Systems Governed or Overseen

The CNMV's direct payment system oversight is limited, with primary payment system responsibilities held by the Banco de Espana. However, the CNMV oversees the following settlement infrastructure:

While the CNMV does not directly oversee retail payment systems (that responsibility lies with the Banco de Espana), its oversight of securities settlement and post-trade infrastructure indirectly affects the financial plumbing through which securities transactions settle and funds are transferred between market participants. The growing intersection of crypto-asset transfers and traditional financial infrastructure under MiCA further increases the CNMV's relevance to value movement across the Spanish financial system.

Relationship to Other Regulators

The CNMV operates within Spain's twin-peaks regulatory model and maintains extensive relationships with domestic and international bodies:

• Banco de Espana (Bank of Spain) [A213-ES-NAT] — Spain's central bank handles banking supervision, payment institution licensing (PSD2), electronic money institution licensing, payment systems oversight, and prudential regulation. The CNMV and Banco de Espana coordinate through formal cooperation agreements on matters of shared jurisdiction, including crowdfunding platform supervision and AML/CFT enforcement

• European Securities and Markets Authority (ESMA) [A031-EU-SUP] — The CNMV participates in ESMA's supervisory convergence programs, contributes to ESMA policy development, and coordinates on cross-border enforcement and MiCA implementation

• European Banking Authority (EBA) [A016-EU-SUP] — Coordination on the MiCA/PSD2 interface, particularly regarding the boundary between crypto-asset services and payment services

• European Central Bank (ECB) [A015-EU-SUP] — Indirect coordination through the SSM framework for banking-related matters and monetary policy implications of securities market developments

• European Insurance and Occupational Pensions Authority (EIOPA) [A032-EU-SUP] — Coordination on insurance-linked securities and pension fund investment regulation

• European Systemic Risk Board (ESRB) — Participation in macroprudential risk assessment and systemic risk monitoring

• International Organization of Securities Commissions (IOSCO) — Participation in global securities regulation harmonization and cross-border enforcement cooperation

• Financial Action Task Force (FATF) [A039-INTL-SUP] — AML/CFT coordination for investment firms and crypto-asset service providers

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Notes on Naming and Language