How to comply with article II.8 of CSSF 20/758?

Question

I need to bring my Luxembourg organisation into compliance with article II.8 of CSSF 20/758 (CSSF 20/758). What are the concrete requirements, the sanctions, and how can Luxgap support me?

Accepted Answer

The classic trapPoint 184 imposes a legal reporting obligation to the CSSF with a strict deadline: no later than one month after the ordinary general meeting that approved the annual accounts. What the CSSF sanctions in practice is not the quality of the content but late transmission and missing deliverables. Many investment firms submit the annual compliance attestation signed by authorised management but forget one internal control function summary report, or file documents in a non-authorised language. The CSSF treats these omissions as a signal of a weak internal governance framework.The deliverables and rules you must never missUp-to-date ICAAP and ILAAP reports, consistent with the approved accounts.Annual compliance attestation to the circular, issued by authorised management (not by a delegate).Summary reports of the three internal control functions: compliance, risk management, internal audit.Mandatory deadline: one month maximum after the AGM that approved the annual accounts.Restricted language: French, German or English only.Transmission via the official CSSF channel, with timestamped proof of filing.The most common trap: the reference date is the general meeting date, not the accounting closure. A late AGM does not push the obligation back indefinitely, and an early AGM sharply shortens the one-month window.How Luxgap automates this riskOur Luxgap Regulatory Filing Orchestrator makes it impossible to forget a deliverable or exceed the CSSF one-month deadline. The tool connects to your corporate calendar (M365, Odoo), your document vault (SharePoint, eBRC) and your validation workflows to automatically trigger the countdown as soon as the AGM date is confirmed, then to verify that every required document exists, is signed and is in an authorised language before transmission.Detects the AGM date in your systems and automatically computes the CSSF one-month deadline, with Teams alerts at D-30, D-15 and D-5.Verifies the presence of the ICAAP and ILAAP reports, the authorised management compliance attestation and the three internal control function summary reports.Checks that the attestation is signed by authorised management and blocks submission if an unauthorised signatory appears.Automatically detects the language of each document and alerts if a document is not in French, German or English.Produces a timestamped PDF filing receipt, usable in an inspection, demonstrating compliance with the point 184 deadline.Available as a complement to a Luxgap DPO or CISO mandate or as a dedicated SaaS module depending on your scope. Request a tailored quote and our teams will prepare a demonstration on your real regulatory calendar, with a free blank audit within 48h to measure your exposure before any commitment.

Chapitre 8 - Reporting légal

They trust us

Before we chat