CNMV (Comisión Nacional del Mercado de Valores)

What is the CNMV

The Comisión Nacional del Mercado de Valores (CNMV) is Spain’s independent securities market regulator and supervisor. Established by the Securities Market Act of 1988 and currently governed by the Ley 6/2023, de 17 de marzo, de los Mercados de Valores y de los Servicios de Inversión (LMVSI) — which transposes MiFID II (Directive 2014/65/EU) into Spanish law — the CNMV operates under the principles of risk-based supervision and investor protection.

The CNMV’s statutory objectives are threefold: ensuring market transparency, safeguarding fair price formation, and protecting investors. Its decisions are reviewable by the Audiencia Nacional (Spain’s central administrative court), and non-compliance with CNMV requirements can trigger enforcement proceedings with fines reaching 10% of annual turnover or €10 million for the most serious infringements.

Entities requiring CNMV authorisation

Under the LMVSI, prior CNMV authorisation is mandatory for the following categories:

• Investment services firms (ESI): securities dealers (sociedades de valores), securities agencies (agencias de valores), and independent financial advisors (EAFI)
• Collective investment fund managers (SGIIC) and venture capital fund managers (SGEIC) under Ley 35/2003 and Ley 22/2014
• Crypto-asset service providers (CASP) under Regulation (EU) 2023/1114 (MiCA)
• Issuers of asset-referenced tokens (ART) making a public offer or seeking admission to trading

Conducting any of these activities without the requisite authorisation is classified as a very serious infringement under Article 294 LMVSI and triggers both administrative fines and potential personal liability for directors.

Supervisory functions

The CNMV exercises continuous supervision over authorised entities, requiring them to maintain capital requirements at all times, submit periodic prudential reports (FINREP, transaction reporting), and comply with MiFID II conduct obligations: best execution policy, suitability and appropriateness assessments, conflicts-of-interest management, and costs and charges disclosure.

The CNMV also maintains publicly searchable registers of all authorised entities, enabling investors to verify the legal status of any firm offering investment services in Spain.

Practical implications for businesses

The critical first step for any business evaluating a regulated financial activity in Spain is determining whether its services fall within any of the regulated investment services listed in Annex I LMVSI. Misclassification — assuming an activity does not require authorisation when it does — is the most costly regulatory risk in the lifecycle of a financial entity.

The legal deadline for the CNMV to resolve an authorisation application is six months from receipt of a complete file, though real-world timelines for mid-complexity entities typically run twelve to eighteen months.

For guidance on CNMV authorisation and ongoing compliance, see BMC’s financial regulatory practice.