Background

The Principality of Andorra (“Andorra”) is a microstate situated in the southwest of Europe, bordered by Spain and France, which has historically based its significant economic prosperity on a competitive model that encompasses tourism, trade, construction and its capacity as a financial hub. Since 2008, the jurisdiction has provided a host of international strategic opportunities at both the corporate and individual level, based on the liberalisation of foreign investment, which is complemented by a competitive tax framework. This new economic model has enabled the country to become an attractive jurisdiction with respect to the development of investment projects and business initiatives.

In recent years, Andorra has experienced remarkable growth in fintech initiatives and in the establishment of companies (start-ups) providing innovative solutions in this area, competing directly with large local companies. As the number of fintech companies in Andorra is still small compared to EU countries, the Andorran government passed, on 1 December 2022, a law on digital economy, entrepreneurship and innovation aimed at promoting new business models focused on the digital world and designed to enhance the competitive advantages of the Andorran economy (the “Digital Economy Law” – Llei 42/2022, de l’1 de desembre, de l’economia digital, l’emprenedoria i innovació). It also passed, on 30 June 2022, a law on digital representation through cryptographic means, distributed ledger technology and blockchain (the “DLT – Blockchain Law” – Llei 24/2022, del 30 de juny, de la representació digital d’actius mitjançant l’ús de la criptografia i de la tecnologia de llibre registre distribuït i blockchain).

Negotiations between Andorra and the European Union for an association agreement (the “Association Agreement”) commenced in April 2014 and had reached their final stages as of December 2023. The Association Agreement will lead to Andorra’s gradual integration into the European internal market, facilitating the adoption of EU regulations in the coming years. Expected to conclude by the end of 2024, the Association Agreement will undergo public consultation and a subsequent referendum. The Association Agreement represents a strategic milestone for Andorra, aligning its financial regulations with global standards. As Andorra progresses towards integration into the European internal market, the fintech sector can anticipate the adoption of EU financial regulations in the coming years.

The scope of action of fintech companies is restricted by the strong presence of the financial industry, with the long-standing traditional banking sector as the backbone of the present Andorran economy, as well as by the fact that the provision of financial and investment activities triggers licensing requirements (Andorra is not a member of the EU).

With reference to Andorran financial entities (ie, banking entities, financial investment entities, management companies for collective investment schemes, non-banking financial entities that offer specialised credit, insurance companies, payment entities and electronic money institutions), technological innovation brings with it the possibility of a great improvement in their business models (by means of, for example, digital identification, mobile applications, cloud computing, big data or DLT/blockchain) and, consequently, this represents a paradigm shift.

Fintech solutions are helping in daily financial activities and are bringing Andorran financial entities the opportunity to be prepared for future challenges, by adapting their services and processes to international standards and the latest technological innovations, promoting competition worldwide and facilitating cost reduction.

Other stakeholders are also beneficiaries of the fintech ecosystem, including citizens, who are becoming increasingly involved in the fintech environment, and on a sophisticated level.

Furthermore, it is worth mentioning the strong commitment of the Andorran government and its promotion of fintech solutions, entrepreneurship and disruptive innovation – eg, the use of DLT, the internet of things (IoT) and artificial intelligence (AI) by Andorran public authorities or entities, financial entities, and Andorran representative companies and local associations. These are clear indicators of the very significant steps that have been taken towards the new technological paradigm. However, the challenges presented within the context of fintech (ie, cybersecurity, consumer protection, personal data protection, and anti-money laundering and combating the financing of terrorism) must be carefully attended to, with the aim of promoting a sound level of regulation/supervision (preventing regulation arbitrage), equal competition and a level playing field for incumbent institutions and new players.

With this aim, and in conjunction with the Andorran government, other actors involved in the Andorran digital transformation, under the symbolic motto on Andorra’s flag, Virtus Unita Fortior (strength united is stronger), are as follows.

Andorra Business

Andorra Business is a programme promoted by the Andorran government under the legal form of a public agency, which includes several ministries, government agencies, associations and/or organisations from the private sector. Andorra Business provides support to foreign investment and Andorran companies in their innovation processes.

Economic diversification is promoted by Andorra Business through different clusters related to, inter alia, innovation, health and sports.

The Cluster of Innovation and New Technologies of Andorra Association (“ACTinn”), is a non-profit association, created by the collaboration of local companies. ACTinn facilitates the development of entrepreneurial initiatives and contributes to the modernisation of traditional Andorran sectors, making Andorra a benchmark for efficiency and excellence within the areas of innovation and new technologies. Additionally, ACTinn promotes the organisation of events to showcase trends and advances, projects and services available, as well as new technologies of interest to companies, entrepreneurs and institutions.

The Andorran Financial Authority (AFA)

The AFA is also committed to new fintech and, more generally, technical and regulatory advances in the financial sector, always prioritising the protection of investors. Accordingly, the AFA has established a channel of communication in order to answer questions from entrepreneurs related to the possibility of rendering financial or investment services.

The AFA recognised that it faces a challenge ensuring that fintech practices are properly provided without undermining consumer protection and the stability of the Andorran financial system as a whole.

The Andorran Banking Association (ABA) and Andorran Financial Entities

Technological innovation is at the core of ABA initiatives to the extent that new products and services are coming from banks and start-ups alike. As a result, the ABA is working together with Andorra Business and Andorran banking entities to face the challenges and opportunities posed by fintech and digital transformation.

In the same vein, Andorran financial entities support innovation in business and actively contribute to promoting fintech solutions and supporting entrepreneurs. A remarkable examples of this innovation is MyAndbank, the newly launched fully digital banking service by Andbank, which marked its inaugural year with an impressive milestone of 12,200 clients benefiting from fee-free services across cards, accounts, and transfers. MyAndbank has emerged as a pioneer in democratising savings and investment products, offering a wide range of services tailored to every profile. MyAndbank made headlines as the first bank in Andorra to integrate the Bizum online platform for payments system, followed by the rest of the Andorran banking sector.

Meanwhile, MoraBanc has also been at the forefront of digital initiatives. One notable project in 2023 was the introduction of Garmin Pay, marking the debut of the XPay service in Andorra, which has garnered strong acceptance among clients, witnessing sustained growth in both new users and transaction volumes. In recognition of its digital prowess, MoraBanc clinched the title of Best Digital Bank and Best Banking App in Andorra from World Finance magazine in 2023, reaffirming its position as the leading digital bank in Andorra.

In addition to this, is the activity carried out by Scale Lab, promoted by another Andorran banking entity, Crèdit Andorrà, SA. Scale Lab is a business acceleration programme for entrepreneurial projects in the consolidation and/or growth phase that combines consultation and funding activities to help participating companies identify and implement a suitable growth strategy.

Andorra Telecom 

Andorra Telecom has focused on digitalisation within the context of its relationship with customers.

The Andorran Business Confederation (Confederació Empresarial Andorrana or CEA)

The CEA is an Andorran association, the aim of which is to represent, manage, promote and defend the general and common interests of Andorran business and professional organisations.

It promotes economic diversification in terms of sectoral needs through various clusters, in collaboration with other public institutions (ie, Andorra Telecom, Andorra Business, and Forces Elèctriques d’Andorra or FEDA).

The Andorran fintech environment is still developing, although there has been remarkable growth in fintech initiatives and the establishment of new companies/start-ups competing directly with the potent local financial industry, dominated by the banking sector with a few key players (operating banking groups).

Against this background, the Andorran fintech sector has not reached the stage of having verticals, per se, and it is not possible to distinguish between new and legacy players. Nonetheless, it is clear that the Andorran government, the AFA and the ABA have a favourable stance towards the fintech sector. This positive trend is expected to continue in the coming years, and it is probable that an ad hoc fintech regulatory framework will be set up.

To date, the fintech environment in Andorra includes some blockchain technology operators and specialised start-ups.

Also noteworthy is the growing presence in Andorra of a wide variety of companies/start-ups. Although the verticals are not clearly defined, the technological companies/start-ups involved with payment systems are dominant, along with those providing tokenisation or blockchain technology.

As mentioned in 2.1 Predominant Business Models, Andorra has not set up a regulatory regime applicable to fintech players and the fintech sector is still in its “initial” phase. However, it appears that the main regulatory fintech developments will relate to and be applicable to the core banking business of local banking entities (eg, the processing of payments based on blockchain technology, investment advice or portfolio management), taking the payment services regulatory framework – the update of implemented Directive 2007/64/EC of the European Parliament and of the Council of 13 November 2007 on payment services in the internal market (PSD1) to Directive (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market (PSD2) – and the insurance legal framework as starting points.

Furthermore, the implementation of the Markets in Financial Instruments Directive 2014 (MiFID II), will face some challenges in fintech ecosystem and DLT/blockchain regulation (ie, cryptocurrency exchange services or custodian wallet providers). This implementation process will be complemented by the AFA’s Technical Communications (Comunicats Tècnics) and further connected instruments, and the progressive implementation of further EU regulations through the Annex to the Monetary Agreement.

On 15 November 2023, the Andorran General Council passed a bill addressing the organisational aspects and operations of entities within the financial system, alongside measures targeting market abuse, incorporating MiFID II in Andorra as an amendment to the Financial Securities Act (the “MiFID II Draft Bill”). The MiFID II Draft Bill has as its main purpose the incorporation of the provisions of MiFID II into the Andorran legal framework, in order to align Andorran regulations with MiFID II standards concerning, among other things, advisory services, portfolio management, appropriateness and suitability criteria, product governance standards, client information, inducements and remuneration, conflicts of interest, asset safeguarding, record-keeping practices, best execution policies, and internal control measures.

In addition, Andorra has implemented legal aspects of the electronic identification and trust services, known as the “eIDAS Regulation”, which constitutes the main electronic identification trust framework in the EEA, through Act 35/2014 on trusted e-services.

This particular piece of legislation will play a pioneering role in the forthcoming regulation of DLT/blockchain within Andorra.

Likewise, the 5th Anti‑Money Laundering Directive has been incorporated into the Andorran legal framework, which covers providers engaged in exchange services between virtual currencies and fiat currencies as well as custodian wallet providers.

There are no particular provisions in Andorra governing compensation models that industry participants are allowed to use to charge customers (with the exception of financial and investment activities). The only relevant legislation are the consumer protection regulations which cover transparency requirements.

There is as yet no two-tier fintech regulation that distinguishes between legacy and new players.

A regulatory sandbox has recently been set up within Andorra through the Digital Economy Law.

According to the preamble of the Digital Economy Law, its Title VIII regulates a controlled testing environment consisting of a safe space in which initiatives can be tested, such as products, services, business models or projects related to the digital economy or innovation. In this controlled testing environment, the opportunities and risks presented by the initiatives are analysed by carrying out an evaluation of the feasibility of the initiative in question, particularly as regards its exploitation in the market and its regulatory compliance.

Regulatory sandboxes, as well as innovation hubs, promote dialogue between fintech firms and regulators/supervisors about the deployment of new technologies in a closely controlled environment.

Developed through Decree 211/2023 on 10 May 2023 (the “Sandbox Regulation”), this legislation provides a structured framework to foster innovation while ensuring regulatory compliance and consumer protection. This is an embryonic initiative with the aim of testing new business models that are not yet regulated. The Sandbox Regulation creates a controlled testing environment where emerging business models can be explored and evaluated for their viability. It serves as a platform for experimentation, allowing stakeholders to navigate regulatory complexities and assess potential risks and opportunities. By offering this safe space for innovation, Andorra seeks to encourage entrepreneurial endeavours and promote the development of cutting-edge solutions within its digital economy landscape.

A clear example of an innovation hub in Andorra is the Living Lab developed by Andorra Business. This new regulatory framework allows companies and entrepreneurs to test their blockchain-based innovations, ideas, solutions, and business models in a controlled and limited setting, providing regulatory flexibility.

The AFA stands as the single supervisory body (ie, there is no twin-peaks model) with supervisory powers over the local banking and insurance/reinsurance sector (Andorra lacks specific capital markets legislation), but it has not yet been armoured with a specific fintech regulatory framework.

With the implementation of the PSD2, other players have entered into the payment services scheme, namely, payment initiation service providers and payment information service providers, which are bound by anti-money laundering regulation and fall under the supervisory power of the Financial Intelligence Unit of Andorra (UIFAND).

Regulated functions which involve the provision of financial services may not be outsourced to third-party vendors, to the extent that the provision of financial services in Andorra is subject to obtaining prior authorisation from the AFA (under its reservation activity regime). Therefore, any regulated functions which are performed/provided within Andorra should be exclusively carried out by local financial entities authorised to operate in the Andorran financial system by the AFA (referred to here as “local entities”).

In light of this and to avoid potential breaches of the reservation activity regime, regulated functions should be outsourced to another local entity.

However, ancillary services which do not entail the provision of financial services may be outsourced (eg, technological solutions/software concerning payment services or fund administration).

As platform providers must take the form of Andorran licensed financial entities, they are bound by Act 8/2013 with regard to market abuse and inside information.

Accordingly, they must report to the AFA, without delay, if they reasonably suspect that a transaction might constitute market abuse. To this end, every entity must appoint persons responsible for making these communications and must notify the AFA of their identity.

Due to the absence of a fintech regulation framework, no enforcement actions have yet been taken by the AFA.

However, bearing in mind the size of the country and the limited number of players, the AFA is remarkably active in inspecting the market to detect any regulatory infringement.

At present, privacy and cybersecurity laws have not been amended to reflect the particulars deriving from the new technological paradigm, including DLT, AI, IoT and the blockchain environment.

The National Cyber ​​Security Agency of Andorra is responsible for planning, co-ordinating, managing and controlling the cybersecurity of networks and information systems, whose main mission is to guarantee cybersecurity in the Principality of Andorra. In line with this, on 22 June 2022, Law 22/2022, of 9 June, on measures for the security of networks and information systems, was published, which aims to regulate the reinforcement of the resilience of critical entities.

There is not as yet any effective ongoing regulatory surveillance of new fintech players/initiatives in Andorra.

However, the AFA is highly involved in local fintech initiatives, paying close attention to any new issues and establishing an open dialogue with the local fintech ecosystem.

No specialised fintech players currently operate in Andorra and, as a result, industry participants do not offer unregulated/unregulated-regulated products and services to the general public as yet.

Fintechs that are considered regulated entities (eg, entities providing banking, financial and insurance services) in accordance with the financial laws of Andorra are subject to Andorran AML Rules. Providers of virtual assets services (eg, exchange and wallet providers) are also subject to Andorran AML Rules as per the most recent legislative amendments in this regard.

Andorra is not a member of the EU. Accordingly, the freedom of provision of financial and investment services granted by the European passport does not apply. All financial and investment activities directly carried out within the Andorran jurisdiction:

• are subject to prior authorisation by the AFA; and
• can only be carried out directly by local entities (ie, under the reservation activity regime). 

Investment advice is a regulated activity in Andorra and it may only be rendered by the following local entities:

• banking entities;
• financial investment entities;
• financial investment agencies;
• asset management companies; and
• financial advisers.

Robo-advisers and Automated Advice

Robo-advisers are automated digital platforms that provide financial and investment advice using algorithms. To the extent that this technology implies the provision of investment advice, the development of a robo-adviser platform addressing investors in Andorra triggers licensing requirements.

In the event that robo-adviser platforms engage in the management of portfolios in accordance with mandates given by clients on a discretionary client-by-client basis, and where such portfolios include one or more financial instruments, the provision of the service will trigger licensing requirements, as this is a regulated activity in Andorra. Management portfolios can only be rendered by the following local entities:

• banking entities;
• financial investment entities;
• financial investment agencies; and
• asset management companies.

Consequently, the fact that the service is automated does not require different treatment from that which would be applied to the provision of investment advice or management of a portfolio in a traditional manner. The point is to distinguish between the provision of investment services (which trigger licensing requirements) and technological solutions/platforms, which support the rendering of the licensed service.

As cutting-edge technologies are developed by Andorran financial entities to provide new and better financial and investment services to clients, some fintech initiatives are being developed by Andorran banking entities which have integrated robo-adviser platforms.

To illustrate this, as of 2 October 2017, the banking entity Crèdit Andorrà launched “Merkaat”, the first hybrid digital investment adviser in Andorra. The service enables clients to manage investment advice, execute orders, provide custody and monitor transactions, incorporating the advantages and efficiency of automated services with a team of advisers to assist clients.

Likewise, other banking entities have entered into collaboration agreements with third parties in order to provide digital wealth management solutions to end-investors.

The execution of client orders is also a regulated activity in Andorra and may only be provided (with the authorisation of the AFA) by:

• banking entities;
• financial investment entities; and
• financial investment agencies.

Accordingly, other entities authorised to provide investment advice through a robo-adviser platform need the intermediation of the aforementioned entities to execute client orders (most commonly a banking entity in which the client holds a bank account).

Under the reservation activity regime, lending activity – which includes consumer credit, credit agreements relating to immovable property, factoring (with or without recourse), financing of commercial transactions (including forfeiting) and financial and non‐financial leasing (renting) with or without a purchase option – does involve regulatory differences based on the characteristics of the borrower (ie, from a regulatory standpoint, the same treatment applies to individuals and small or large business or institutional investors), but remains reserved to banking entities.

Note that the Digital Economy Law has introduced crowdfunding activities under the reservation activity regime.

Following on from 1. Fintech Market, 2. Fintech Business Models and Regulation in General and 4.1 Differences in the Business or Regulation of Loans Provided to Different Entities, it is notable that no online lending is currently being provided in Andorra by traditional banking entities or by fintech players. Traditional banking entities have made a substantial investment in the technology applicable to their core banking business (approximately EUR212.3 million in the last six years) and have developed some automated solutions for investment services (ie, financial investment advice), as described in 3.2 Legacy Players’ Implementation of Solutions Introduced by Robo-advisers. However, the granting of finance remains subject to conservative underwriting procedures.

The main sources for funds for loans are deposits taken from the general public (according to the last Annual Report issued by the ABA in 2022, deposits taken from the public made up approximately 70% of the Andorran banking system’s aggregated financial liability).

Nevertheless, in recent years the Andorran banking sector has made notable efforts to diversify its financing sources, carrying out capital markets transactions (eg, structural covered bonds issuances), despite the lack of comprehensive capital markets legislation and the absence of a direct connection to secondary markets and public offering/private placement regulations. This positive stance towards the opening of new financing sources – jointly with the ongoing initiatives for creating capital markets legislation in Andorra, as the unified code regulating financial activity in Andorra – may set the tone for and contribute to the fast and integrated adoption of fintech financing mechanisms, mainly by local banking entities.

In fact, a peer-to-peer/crowdfunding legal regime has been established by the Digital Economy Law.

Syndicated lending is not common in Andorra and the few instances observed have mainly been related to the financing of road infrastructure or government projects. The syndication process and its structure/organisation are therefore determined on a case-by-case basis.

Payment processors must follow a narrow path to create/use new/independent payment rails, other than those that are already in place and run by local banking entities in Andorra, due to the predominance of the local banking players and the high cost of setting up payment-processing infrastructure, which acts as a deterrent/entry barrier for new players.

As the processing of payments falls within the reservation activity regime, any fintech player wanting to operate as a payment processor would be required to obtain prior authorisation from the AFA, which would entail a relatively high financial cost as well as an exhaustive administrative process. Some processors therefore act, on a case-by-case basis, under a reverse solicitation scenario or with little connection to the jurisdiction.

Monetary remittance is a simple payment service regulated under the Payment Services Act. Accordingly, the provision of monetary remittance triggers licensing requirements and can only be rendered by:

• banking entities;
• payment institutions;
• electronic money institutions; and
• La Sociedad Estatal de Correos y Telégrafos, SA and La Poste Société Anonyme a Capitaux Publics, which are entities located within Andorra and authorised to operate by the AFA through the granting of a correspondent licence and under the legal recognition granted by the Payment Services Act.

As far as cross-border payments are concerned, as of 1 March 2019, Andorra became part of the Single Euro Payments Area (SEPA) payments scheme. SEPA was created to fully harmonise electronic euro payments and make it as easy and convenient for citizens and businesses across Europe to pay with one payment account and one card, as it would be in their home countries.

Overall, the integration of Andorra into the SEPA framework has allowed access to all SEPA’s framework benefits for Andorran-based payers, gradually harmonising payments by means of three essential types of instrument covered under the different SEPA schemes:

• credit transfers;
• direct debits; and
• payment cards.

Euro-denominated transactions between participant countries are accordingly subject to a set of rules and uniform conditions that allow for secure, automated and uniform processing when both or one of the payer’s and payee’s payment services providers are located in Andorra, or one is located in Andorra and the other in any SEPA country.

The specific role of fund administrator is not regulated in Andorra. The only legal reference to fund accounting and the activities of a registrar/transfer agent related to Andorran collective investment schemes, is the provision on the functions of Andorran management companies and the delegation of those functions to third parties.

The legally recognised functions of Andorran management companies are:

• asset management, which includes investment decisions and the exercise of economic and political rights;
• administrative management, which includes the NAV (net asset value) calculation, accounting and legal tasks, the drafting of prospectuses and public reports, the calculation of distributable profits, compliance functions, the maintenance of the unit-holder register, and judicial and extrajudicial representation;
• liability management, which includes acceptance of subscriptions, redemptions and transmissions of the corresponding orders to the depositary, and ordering redemptions/sales of the units to the depositary;
• activities related to distribution, which include documentation (advertising materials, annual reports) and the selection of distributors; and
• advice to other management companies and the exercise of delegated functions.

Accordingly, Andorran management companies may delegate:

• administrative management;
• asset management;
• liability management (only to the depositary); and
• distribution.

However, the simultaneous delegation of administrative management and asset management is not possible. Additionally, the delegation of functions must be formalised in writing and requires initial communication to the AFA. Nonetheless, when the beneficiary of the delegation is an entity located in a third country or when the delegation refers to compliance functions, calculation of NAV or accounting, prior authorisation by the AFA is required.

The AFA only authorises delegation of functions if:

• the delegation does not hinder the supervisory powers of the AFA;
• the delegation does not generate a conflict of interest;
• the Andorran management company controls the beneficiary entity or the delegation can be voided at any time by the Andorran management company;
• the beneficiary of the delegation complies with the technical standards required for the function that is delegated; and
• the beneficiary of the delegation is subject to the supervision of the AFA if it is an Andorran entity, or to the supervision of any equivalent body of the EU, the OECD or other third countries.

There are no Andorran provisions regulating the minimum contractual terms among fund advisers and fund administrators, which are regulated under the principle of party autonomy and market standards. The only legal obligation to identify any advisory agreement in the prospectus of the fund.

As far as market practice is concerned, the most common clauses to include in the agreement with the purpose of assuring performance and accuracy, concern:

• independent portfolio administration;
• prohibition of replicating advice given to other funds or third parties;
• exchange of information;
• receipt of all relevant information to provide investment advice; and
• provision of information concerning any change of circumstances or any other fact that may impact on the advice (and the agreement) or may modify the information previously obtained by the fund adviser.

As stated in 4.3 Sources of Funds for Loans, Andorra has not yet developed specific capital markets legislation and there are not, as yet, any trading platforms.

There are only two classes of assets according to Andorran regulation: financial instruments and e-money.

Act 8/2013 interprets financial instruments in the widest sense of the term as any of the following:

• Securities (valors negociables), negotiable in the capital markets, save for payment instruments:
1. shares in companies and other securities equivalent to shares in companies, partnerships or other entities, and depositary receipts in respect of shares;
2. bonds or other forms of securitised debt, and depositary receipts in respect of bonds; and
3. any other securities giving the right to acquire or sell any such transferable securities or giving rise to a cash settlement determined by reference to transferable securities, currencies, interest rates or yields, commodities or other indices or measures.
• Money market instruments (instruments del mercat monetari).
• Units in collective investment schemes (participacions d’OIC).
• Options, futures, swaps, forwards and other derivatives related to securities, currency, interest or yield rate, or other derivative instruments, financial indexes or financial measurements which may be settled physically or in cash.
• Options, futures, swaps, forwards rate agreements and other derivatives related to commodities that must be settled in cash or may be settled in cash at the option of one of the parties (otherwise than by reason of default or other form of termination).
• Options, futures, swaps, and any other derivative contract relating to commodities that can be physically settled provided that they are traded on a regulated market and/or a multilateral trading facility.
• Options, futures, swaps, forwards and other derivatives related to commodities that may be settled physically, not otherwise mentioned in the previous paragraph and not being for commercial purposes, which have the characteristics of other derivative financial instruments, having regard to whether, inter alia, they are cleared and settled through recognised clearing houses or are subject to regular margin calls.
• Credit derivatives.
• Financial contracts for differences.
• Options, forwards, swaps, forward rate agreements and other derivatives related to climatic variables, freight rates, emission allowances or inflation rates or other official economic statistics that must be settled in cash or may be settled in cash at the option of one of the parties (other than by reason of default or other form of termination), as well as any other derivative contracts relating to assets, rights, obligations, indices and measures not otherwise mentioned in the previous paragraphs, which have the characteristics of other derivative financial instruments, having regard to whether, inter alia, they are traded on a regulated market or a multilateral trading facility, are cleared and settled through recognised clearing houses, or are subject to regular margin calls.

As far as the definition of e-money is concerned, the Payment Services Act has transposed the same definition as used in the PSD2.

Despite the embryonic state of the crypto-assets regulatory regime in Andorra and the fact that there have so far been no changes in the legislation (except for the entering into force of DLT – Blockchain Law on 30 June 2022), crypto-assets and the use of DLT may be a relevant turning point for the Andorran financial sector, especially if applied to its core banking business.

Cryptocurrency exchanges are regulated in Andorra under the DLT – Blockchain Law.

There are no secondary markets in Andorra and, therefore, no stock exchange legislation or listing standards have yet been created.

No order-handling rules currently apply.

However, there are some generic rules governing the execution policies of financial entities under investor protection regulation (MiFID).

See 4.3 Sources of Funds for Loans and 7.1 Permissible Trading Platforms.

See 7.5 Order-Handling Rules.

See 7.1 Permissible Trading Platforms.

Act 8/2013 provides for a legal regime for market abuse and inside information. Specifically, this piece of legislation prohibits any person referred to in the law who possesses inside information from using that information by acquiring or disposing of, or by trying to acquire or dispose of, on their own account or on the account of a third party, either directly or indirectly, financial instruments to which that information relates. Additionally, it prohibits any person subject to such prohibition from:

• disclosing inside information to any other person unless such disclosure is made in the normal course of the exercise of their employment, profession or duties; and
• recommending or inducing another person, on the basis of inside information, to acquire or dispose of financial instruments to which that information relates.

Market Manipulation

Act 8/2013 also prohibits any person from engaging in market manipulation.

Market manipulation means dissemination of information through the media, including the internet, or by any other means, which gives, or is likely to give, false or misleading signals regarding financial instruments, including the dissemination of rumours and false or misleading news, where the person who disseminated the rumours or news knew, or ought to have known, that the information was false or misleading. In respect of journalists acting in their professional capacity, such dissemination of information is to be assessed, taking into account the rules governing their profession, unless the persons concerned derive, directly or indirectly, an advantage or profits from the dissemination of the information in question.

Additionally, persons who produce or disseminate investment recommendations in Andorra in the course of their work, in accordance with the legislation in force, their profession or their functions, have to ensure, with reasonable care, that the information destined for the distribution channels or the public is fairly presented and includes the interests or conflicts of interests existing over the financial instruments to which the information relates.

Any infringement of the prohibitions or requirements laid down in accordance with this legislation can be sanctioned.

There are currently no specific regulations on high-frequency and algorithmic trading. The main upcoming milestone will be the implementation of the MiFIDII framework scheduled in 2024 through the MiFID II Draft Bill. Level 2 and level 3 regulatory development has still to be developed.

At present, Andorran law does not require players to register as market makers when functioning in a principal capacity.

See 7.1 Permissible Trading Platforms to 7.4 Listing Standards.

At present, Andorran law does not regulate programmers who develop and/or create trading algorithms and other electronic trading tools.

No content provided for this section.

Financial research (ie, investment reports and financial analyses or other forms of general recommendations relating to transactions in financial instruments) is a regulated activity subject to the reservation activity regime (an ancillary service) within Andorra. Accordingly, this activity can only be rendered by the following Andorran licensed financial entities:

• banking entities;
• financial investment entities;
• financial investment agencies;
• asset management companies; and
• financial advisers.

There are no specific Andorran provisions regulating financial research platforms. However, if a platform is registered in Andorra (either because the provider is an Andorran licensed financial entity or the web page has an Andorran domain), it must comply with the minimum standards required by electronic contracting and consumer protection regulations.

Unverified information is not specifically regulated, yet supervision of this area is embedded in the market abuse regulation framework in accordance with Act 8/2013 which is based on the EU’s Market Abuse Regulation. See 7.9 Market Integrity Principles.

In Andorra, platforms take the form of blogs, where reports are published without the possibility of interaction among investors. The only communication channel is between the entity and the investor or through social media.

In accordance with Act 12/2017 of 22 June 2017, on the regulation and supervision of insurance and reinsurance companies in Andorra – the “Insurance Act” (Llei 12/2017, del 22 de juny, d’ordenació i supervisió d’assegurances i reassegurances del Principat d’Andorra), the players involved are:

• (re)insurance companies, insurance brokerages (corredoria d’assegurances); and
• insurance agents (agents).

Despite the fact that insurance is a regulated activity in Andorra which must be rendered by an Andorran-authorised (re)insurance company, there is also the option for some insurance services to be rendered by the intermediation of an insurance brokerage or an agent, which requires prior inscription in a specific registry provided by the AFA for this purpose.

The process of evaluating the risk of insuring (ie, underwriting) is not expressly regulated in the Insurance Act. Nonetheless, it could be deemed as an ancillary or preparatory activity.

Andorra passed the Insurance Act in June 2017 and in December of the same year passed the regulation to complete the first part of the process of adaptation of Andorran law to the EU’s new insurance regime. This Act vests the AFA with supervisory authority over the insurance and reinsurance market.

This legal framework assumes the conditions and the background of the current Andorran model, with peculiarities derived from the limited size of the sector, and introduced some essential changes to guarantee the transparency and solvency of the sector in line with the provisions of Directive 2009/138/EC of the European Parliament and of the Council of 25 November 2009 on the taking-up and pursuit of the business of insurance and reinsurance (“Solvency II”).

As far as the different types of insurance are concerned, Andorran law establishes that life and non-life insurance and reinsurance companies must, on an annual basis, issue reports in connection with the applicability of the Insurance Act.

Furthermore, different types of insurance and reinsurance are not treated differently in Andorra in so far as the Insurance Act does not provide different sanctions depending on the type.

Regtech providers are not specifically regulated in Andorra and, for the time being, there is no draft bill which establishes the legal status of new players.

However, compliance functions (in-house and outsourced) and lawyers’ exercise of their profession are regulated.

Andorran financial entities could therefore render regtech solutions to third parties in a manner complementary to in-house compliance functions, or even outsource compliance functions to a third party as a critical or important operational function (in accordance with Act 8/2013). Nevertheless, the following requirements must be considered:

• the outsourcing must not result in the delegation by senior management of its responsibility;
• the relationship and obligations of the entity towards its clients must not be altered;
• the conditions with which the entity must comply in order to be authorised, and to remain so, must not be undermined; and
• none of the other conditions, subject to which the entity’s authorisation was granted, must be removed or modified.

The law also requires that Andorran financial entities exercise due skill, care and diligence when entering into, managing or terminating any arrangement for the outsourcing to a service provider of critical or important operational functions or of any investment services or activities.

There is no regulation in Andorra specifically applicable to regtech. Accordingly, the contractual terms imposed are dictated by industry custom and on the basis of the principle of party autonomy. Most common are:

• data protection clauses to prevent the leakage of sensitive information;
• transparency and regulatory compliance clauses requiring disclosure of information about clients;
• contractual clauses imposed to prevent money laundering and the financing of terrorism (ie, scoring clauses); and
• contractual duties to inform the Andorran regulators of suspicious and unlawful behaviour.

The blockchain regime is on the verge of being implemented in the Andorran legal framework through the initiative of some players mentioned in 1.1 Evolution of the Fintech Market.

To this extent, Andorra no longer has a wait-and-see approach, and is establishing a regulatory framework to set out clearly the game rules for public authorities, investors and new players.

The initiative will be underpinned by three pillars:

• digital identity and validating nodes;
• innovation and a “sandbox” environment; and
• virtual assets.

The AFA has aligned its actions in some specific issues regarding cryptocurrency investments with those of the regulators in neighbouring jurisdictions (ie, the National Securities Market Commission in Spain and the European Securities and Markets Authority for the EU) as to the issuance of warnings in the interest of investor protection.

It will be interesting to see how the role of other regulators or supervisors (ie, UIFAND and the Andorran Data Protection Agency) will evolve in a new technological environment.

Under the DLT – Blockchain law, regulated virtual assets are:

• payment tokens;
• utility tokens; and
• asset tokens.

As there are largely no secondary markets and public offering/private placement regulations within Andorra, the main challenge will be to integrate the regulation of initial sales of blockchain assets into the Andorran framework.

The DLT – Blockchain Law foresees the legal regime applicable to digital asset issuers.

See 12.4 Regulation of “Issuers” of Blockchain Assets.

No collective investment schemes investing in blockchain assets appear to have been authorised and registered so far by the AFA.

The DLT – Blockchain Law (approved on 30 June 2022) regulates, among other things:

• the rights and obligations arising from the configuration, structure, issuance, custody, interchange, transmission and amortisation of digital assets;
• the legal regime applicable to the digital representation of assets or tokens issued by entities incorporated in Andorra;
• requirements and procedures applicable to entities conducting transactions and other activities in the blockchain ecosystem;
• decentralised finance;
• exchanges of digital assets; and
• entities providing custody services in relation to digital assets, smart contracts, and supervisory systems of entities acting in the digital assets ecosystem, etc.

The DLT – Blockchain Law includes the following definition of DeFi: “those ecosystems that, under the basis of a public blockchain/DLT and open source, use financial instruments or digital assets and offer financial services in a decentralised manner by means of applications and the use of intelligent contracts with the purpose of automating and correctly performing certain functions without the intervention of a central authority or intermediary.”

As far as platforms are concerned, certain minimum requirements need to be fulfilled before DeFi platforms can operate in Andorra:

• they must be fully technological, without loops, back doors or hidden functions, malicious software, fraudulent functions and with a responsible administration of cryptographic keys;
• they must ensure the correct functioning of the service by means of the correct performance and transparency of the algorithm/protocol and must facilitate any required audit;
• they must provide the activity report of the Sandbox of the Principality of Andorra with indication of the stress test corresponding to the operational test in terms of security; and
• they must have, in addition to the node record or the records of all operating nodes, the AFA’s approval regarding compliance with auditing standards to allow its participation or use within the environment in which it intends to operate.

A licence from the AFA will be required as long as:

• the ecosystem is not decentralised by means of intelligent contracts in a complete and autonomous manner;
• intermediaries are not required to process transactions and there is no intermediary to control/access the user’s assets; and
• the platform or ecosystem safeguards the user’s cryptographic private keys linked to the user’s funds.

The activities or transactions that are carried out through DeFi may not be moderated, intermediated or validated by a single or centralised party.

The DLT – Blockchain Law considers the issuance of NFTs to be out of its scope. There is no other piece of legislation in Andorra that refers to, or is seen to refer to, this type of digital representation.

Act 27/2018, on payment services and electronic money, transposes the PSD2 enabling new fintech companies or third parties to offer payment services, namely, account information service providers and payment initiation service providers.

Despite this, to the extent that they are still fairly novel, the use of application programming interfaces (APIs) has not yet materialised. It remains to be seen how open banking evolves in Andorra (for both Andorran financial entities and new players).

Open banking technology allows more transparency concerning the processing of personal data, and users are entitled to decide when such data can be provided to third parties. This determines that personal data belongs to the user and not to the companies responsible for its treatment. Therefore, customers can decide the use and the destination of their personal data. At the same time, interested third parties must be duly authorised and hold a certificate to obtain the personal data of users.

Applicability of the GDPR

In relation to privacy, it must be noted that Andorra is not a member of the EU, and therefore the applicability of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data in Andorra is limited. Nonetheless, the GDPR provides an extraterritorial approach applicable in any third country (such as Andorra) when personal data is processed by an entity not located in the EU, but where the processing activity:

• affects an EU resident; and
• is related to the offering of goods or services to the interested party in the EU.

To this end, as blockchain activity embeds the provision of services, the GDPR will be applicable in Andorra when the processing activities affect an EU resident.

Sometimes blockchain services are provided without any agreement being entered into between the parties regulating data protection obligations. Therefore, the entity or the company providing such services must give advance warning to the interested parties, before transferring their personal data with prior consent and under their responsibility. In any case, the entity must explain the legal basis for the processing of the data concerned. Otherwise, the company or the entity engaged in the processing activity will not be able to prove that they have been proactive, as required in the GDPR provisions.

The Data Protection Act

Act 29/2021 of 28 October, about personal data protection – the “Data Protection Act” (Llei 29/2021, del 28 d’octubre, qualificada de protecció de dades personales) is applicable to the treatment of personal data by those responsible for the processing who are domiciled in Andorra, or incorporated in accordance with Andorran laws. Likewise, it is applicable to the data treatment carried out by those responsible for processing, but not domiciled in Andorra or not incorporated in accordance with Andorran laws, when they use means of treatment located within Andorra.

Regulation developing Act 29/2021, on the protection of personal data, was published in the Andorran Official Gazette on 5 October 2023. This regulation incorporates the principle of extraterritoriality (similar to the EU's GDPR) into the Andorran legal framework, which means that it applies to the processing of personal data by controllers or processors outside Andorra when they carry out processing activities relating to Andorran data subjects or where the processing consists of offering goods and services, including behavioural monitoring, to data subjects in the Principality of Andorra.

With regard to the exercise of data protection rights stipulated in the Data Protection Act, there is a particular interpretation in relation to blockchain services specifying that:

• the rectification right could be limited, to the extent that personal data is adhered to an irreversible block;
• the cancellation right is not feasible for identical reasons (however, new data can be entered into the chain); and
• the opposition right is not applicable, since anyone who introduces their data into the chain voluntarily, cannot defend their privacy.

Another point of interest is whether personal data is irreversibly spread in the chain.

As far as privacy regulation is concerned, the entity responsible for processing the data must adopt the necessary technical and organisational measures to guarantee the confidentiality of the personal data. In addition, they must prevent disclosure of, or unauthorised access to, the personal data.

No content provided for this section.

No content provided for this section.