RegCORE – Client Alert | Banking Union | Capital Markets Union


On 14 December 2023, ESMA, published a detailed discussion paper on the digitalisation of retail investment services and related investor protection considerations (the RIS DP) Show Footnote. The RIS DP explores the evolving landscape of retail investments under MiFID II and the opportunities as well as investor protection risks posed by digitalisation. This includes examining the recent surge in the adoption of digital engagement practices (DEPs) Show Footnote such as nudging, gamification etc. as well as use of other digital tools and social media following the COVID-19 pandemic and an exploration of how technology impacts retail investor behaviour and decision-making. The RIS DIP's analysis is based on the supervisory experience of the EU's national competent authorities (NCAs) as well as supervisory authorities from countries outside of Europe and relevant academic literature. ESMA's recommendations cover the following main topics and communicate several supervisory principles and expectations:

  • Layering and accessibility of information
  • Digital marketing communications and practices
  • The use of influencers
  • Social features of investment apps
  • Gamification
  • Nudging techniques
  • Dark patterns

ESMA is seeking stakeholders' input by 14 March 2024 on targeted questions regarding online disclosures, use of DEPs and other digital tools as well as on marketing practices more broadly. The feedback to the RIS DP will support ESMA's supervisory convergence work and prepare ESMA for publication of further technical advice and regulatory standards which are likely set to follow the baseline supervisory principles and expectations set out in the RIS DP as well as in the targeted questions it is consulting on. This in particular includes the use of DEPs, such as gamification, as well as on the general use of marketing practices by firms, in particular online disclosures and layering. ESMA will also supplement the RIS DP with a separate, concise survey tailored for retail investors, to gather their insights, experiences and feedback on the subject of digitalisation within investment services.

It should be noted that ESMA's efforts in this RIS DP and the forthcoming survey will also be of relevance to the overall work of the EU's co-legislators on the topic, including as part of the "Retail Investment Strategy package" and the finalisation of the Distance Marketing of Consumer Financial Services Directive (see standalone coverage from our EU RegCORE on both topics). It will also be relevant to the respective rulemaking and supervisory activity of ESMA's sister "European Supervisory Authorities" (ESAs) i.e., the European Banking Authority (EBA) and the European Insurance and Occupational Pensions Authority (EIOPA).

This Client Alert assesses the findings and recommendations detailed in the RIS DP and what this means for traditional as well as digital asset-focused financial markets participants both in their documentation as well as day-to-day engagement with market participants and NCAs. This Client Alert should also be read in conjunction with our Client Alerts on "ESAs publish 2023 joint report and recommendations on "Innovation Facilitators" – what next for innovation hubs and regulatory sandboxes?" as well as on "EU reiterates rules to regulating "Finfluencers"" and on "ESMA communicates supervisory expectations on copy trading services."

Key takeaways from the RIS DP

ESMA's RIS DP is addressed to NCAs and other competent authorities as well as the following types of supervised firms as well as ultimately the clients of such firms:

  • MiFID II/IFR/IFD firms;
  • Credit institutions (i.e., banks) providing investment services and activities;
  • UCITS management companies and Alternative Investment Fund Managers, when providing investment services; and
  • Firms (undefined) that "provide the [DEP] described in this paper." ESMA specifically assesses affiliate marketing strategies beyond (f)influencers but also comparison websites or social media platforms.

The RIS DP, unlike previous publications, is also explicitly addressed as "being of interest" to "investor and consumer organisations" as well as "any relevant trade association".

ESMA notes that the COVID-19 pandemic has acted as a catalyst for (prospective) investors using applications, websites and digital tools when managing their finances. Such digitalised delivery channels can also be used to seek recommendations or advice prior to purchasing or selling financial instruments and while welcome, ESMA has also warned that "...over the last years many retail investors also turn to social media to seek these recommendations."

The RIS DP covers the following main topics on relevant firms directly and/or indirectly engaging with (prospective) clients:

  • Online disclosures and layering: The RIS DP explores how firms can improve the information they provide to investors by making use of techniques such as layering Show Footnote, visual aids and interactive elements. The RIS DP suggests some good practices and questions for firms to consider, such as testing the effectiveness of their online (including use of more bespoke) disclosures, providing vital information in the first layer using simple language, followed by more detailed and technical content in subsequent layers without hiding or disguising information. According to ESMA, (prospective) clients should have easy access to all (layers) of information prior to committing to any subscription or purchase, independently of the channel used by the client accessing the information. The RIS DP re-emphasises the need for disclosure to be provided in more accessible and comprehensible way (clear, fair and not misleading statements). ESMA uses the RIS DP to ask stakeholders to provide examples of good and bad practices, as well as feedback on the type of information that should be included in the first layer and the effectiveness of online disclosures.
  • Marketing communications and practices: The RIS DP examines how firms use different channels and strategies to market and promote their financial instruments and services, such as content marketing Show Footnote, social media and through third parties such as affiliates and finfluencers. The RIS DP highlights some of the risks and challenges associated with these practices, such as misleading or "aggressive" marketing Show Footnote, lack of transparency and potential conflicts of interest as well as non-compliant communications that target a broad range of retail clients for complex or high-risk products. Equally, the RIS DP highlights good and poor standards observed in the use of "targeted marketing" Show Footnote and personalisation Show Footnote. The RIS DP proposes some good practices and questions for firms to consider, such as having clear policies and procedures for their marketing practices, ensuring compliance with the applicable requirements and disclosing their relationship with affiliates and finfluencers (this echoes ESMA's earlier statements on finfluencers – see Client Alert referenced above). ESMA uses the RIS DP to ask stakeholders to provide information on how they ensure that marketing communications only reach the intended target market, how they monitor the effectiveness of their marketing practices, and how they deal with vulnerable persons.
  • Digital engagement practices: The RIS DP analyses how firms use various techniques to influence or stimulate the behaviour of investors, such as nudging Show Footnote, gamification, social features, push notifications and dark patterns Show Footnote. The RIS DP acknowledges the potential benefits of these techniques, such as enhancing the user experience, providing education and guidance as well as increasing engagement and retention. However, the RIS DP also warns of the potential risks and harms of these techniques, such as inducing excessive or risky trading, exploiting cognitive biases, influencing investor choices and reducing informed decision-making as well as increasing conflicts of interest. ESMA uses the RIS DP to remind firms to use DEPs responsibly and ethically, in the best interest of the client and in compliance with the relevant regulations. ESMA also suggests that firms should have proper internal rules, policies, processes and tools for their use of DEPs, and that they should design the "choice architecture" Show Footnote of their interface to enable and support investors to make informed and sensible investment decisions avoiding features that favour more costly or remunerative products and displaying a message that excessive trading may lead to financial harm. ESMA asks stakeholders to provide examples of the use of DEPs, such as nudging, gamification, social features, push notifications, and dark patterns, and to provide feedback on their impact on investor behaviour and outcomes.

Aside from the key points above, the RIS DP also repeatedly calls for firms to periodically test their digital delivery channels and disclosures (both in terms of layout and navigation) to ensure these are reliable, useful and understandable to the (prospective) clients. The RIS DP contains a number of visual representations as to what are considered good and poor practices on how information is presented on webpages. ESMA, as is the case with a number of NCAs, are making increased use of "mystery shopping" as a supervisory tool, including to test digital distribution channels and the sales process and this is set to increase in 2024 and beyond.

Given the above, firms are therefore encouraged to more proactively self-assess how they and those acting on their behalf use the channels, tools and practices that are discussed in the RIS DP and the baseline supervisory expectations and principles set out in the RIS DP and in certain respects in light of the targeted questions that ESMA is seeking feedback on. Accordingly, firms may wish to consider making appropriate changes to their policies and procedures as well as their (prospective) client facing disclosures to close the gap in meeting the supervisory expectations set out by ESMA in the RIS DP ahead of ESMA and NCAs adopting a stricter tone and apply more invasive supervisory scrutiny to firms.


While ESMA's view, including as expressed in the RIS DP, is generally positive on the benefits that digitalised delivery channels offer for financial markets participants, it does, besides identifying good practices, warn on poor practices including compliance failings that thus pose risks for investors. ESMA's response to the RIS DP will shape and future legislative and regulatory rulemaking instruments and/or supervisory guidance addressing such perceived risks and how firms are expected to prevent them when either directly or indirectly, including through use of finfluencers, using DEP methods, in particular gamification or any other form of digitalised delivery channels.

We encourage our clients to participate in the response to the RIS DP and to take note of ESMA's forthcoming survey of retail investors and to contact us if they have any questions or concerns regarding the topics covered by the RIS DP or analysis above. We will continue to monitor the developments in this area and provide updates as appropriate. Nevertheless, while the RIS DP is a first step to further rulemaking and supervisory guidance, the tone set by ESMA shows a sufficiently clear path that ESMA is set to explore in its and NCA's supervisory expectations of firms. Early pre-emptive action in targeted improvements to policies and procedures as well as disclosures to (prospective) clients may therefore be recommendable for firms to stay ahead of the curve.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.