Failure to comply with any applicable laws, rules, orders, regulations, codes or other requirements could subject us to litigation, regulatory actions, sanctions, fines or other penalties, as well as damage our brand and reputation. The financial services industry, within which we and many of our clients operate, is subject to extensive laws, rules and regulations, with direct regulation of certain of our products in some jurisdictions. These laws, rules and regulations are complex, evolve frequently and sometimes quickly and unexpectedly, and are subject to administrative interpretation and judicial construction in ways that are difficult to predict, and could materially adversely affect our business or our clients' businesses. Additionally, we may be required to comply with multiple and potentially conflicting laws, rules or regulations in various jurisdictions, which could, individually or in the aggregate, result in materially higher compliance costs to us. Laws, rules or regulations could require changes to the way we license and price our products and services. In addition, various government and regulatory bodies from time to time may make inquiries and conduct investigations into our compliance with applicable laws and regulations and our business practices, including those related to our regulated activities and other matters.
Changes to the laws, rules and regulations applicable to our clients could limit our clients' ability to use our products and services or could otherwise impact our clients' demand for our products and services. As such, to the extent our clients become subject to certain laws, rules or regulations, we may incur higher costs in connection with modifying our products or services. If laws, rules or regulations restrict our clients' or vendors' ability or willingness to provide data to us, or impose new compliance obligations or restrictions on how we access and use such data, our ability to continue to produce products and services, or the costs associated with doing so, could be negatively affected.
The regulatory requirements and regulatory developments that most significantly impact us are described below:
- Regulation Affecting Benchmarks. Compliance with regulations affecting benchmarks or their uses, as well as related technical standards and guidance, could negatively impact our business and results of operations. Benchmarks, which include the indexes we provide, are subject to regulations that may require changes in our business practices, product offerings or our ability to offer indexes in certain jurisdictions. Such impacts could include, without limitation, increased costs, including direct regulatory costs; diminished intellectual property rights; constraints on the fees we charge; constraints on our ability to meet contractual commitments with data providers; or constraints on how we offer our products. Any of these factors could have a material adverse effect on our index products.
For example, the EU Benchmark Regulation ("EU BMR") and UK Benchmarks Regulation ("UK BMR") impose distinct requirements. Following Brexit, the EU BMR provides a transition period until December 31, 2025, allowing EU-regulated entities to use benchmarks from non-EU administrators, while the UK BMR extends this period to December 31, 2030 for non-UK administrators. Diverging interpretations or future amendments to these regulations may increase compliance burdens and operational complexity.
Additionally, guidance issued by the European Securities and Markets Authority ("ESMA") may affect benchmark administrators and their clients. For instance, the ESMA Guidelines on ETFs and other UCITS Issues impose disclosure requirements for indexes used in UCITS funds, such as making index constituents and their respective weightings easily accessible free of charge to investors on a delayed and periodic basis. These requirements could increase the compliance obligations for benchmark administrators, affect the eligibility of certain indexes for use in UCITS funds and influence the demand for specific products.
Globally, the benchmark industry faces heightened scrutiny and potential new regulations. The International Organization of Securities Commissions (IOSCO) has recommended that benchmark administrators voluntarily publicly disclose whether they comply with its principles for financial benchmarks. Other jurisdictions have also indicated they may consider potential benchmark regulation or conduct reviews of the benchmark industry. For instance, the EU is amending the scope of the EU BMR and regulation is being considered or developed in India and South Africa. Heightened scrutiny and regulatory attention on benchmarks and index providers from regulators, policymakers, and the media in the EU, U.S., and other regions could result in negative publicity or comments about the role or influence of our company or the index industry, which could harm our reputation and credibility.
Further, laws, rules or regulations affecting users of our indexes, such as sanctions that prohibit users of our indexes from investing or transacting in securities included in our indexes, can have an indirect impact on our indexes, including their construction and composition.
- ESG Ratings. The EU has adopted a new regulation requiring market participants providing ESG ratings in the EU to become authorized and supervised by ESMA, and certain of our ESG products are in scope for the regulation. A number of other jurisdictions, including the UK, Japan, Hong Kong SAR, Taiwan, India and Singapore, have completed, or are in the process of developing, legislation and/or codes of conduct for ESG rating and/or data providers. Regulatory regimes or initiatives relating to ESG ratings and data providers could impose significant compliance burdens and costs on our ESG and Climate products and services. Furthermore, the potential for inconsistent or conflicting requirements across jurisdictions may create implementation challenges, increase compliance risks and result in inadvertent noncompliance, which could materially impact our operations and reputation.
- Data Privacy and AI Regulation. Laws, rule, regulations and standards governing privacy, data collection, and AI impact our ability to collect, manage, store, and use personal data and other information. We operate across jurisdictions with differing and often conflicting data privacy laws, including extraterritorial requirements, which continue to expand in scope and complexity. Compliance with these laws requires significant resources to ensure data security and regulatory adherence. Furthermore, we frequently have privacy compliance requirements as a result of our contractual obligations with counterparties. Emerging AI regulations, such as the European Union's Artificial Intelligence Act, introduce new requirements for transparency, fairness and oversight of AI systems. These regulations may directly affect our operations, including the use of AI in hiring, employee performance monitoring and client-facing applications, by requiring audits, documentation and human oversight. Compliance with evolving AI regulatory frameworks may increase costs, impact our product development, restrict the use of certain applications of AI and expose us to liability for violations of applicable laws, regulations or contracts.
- Investment Advisers Act. Except for certain products provided by MSCI ESG Research LLC and certain of its designated foreign affiliates, we believe our products and services do not constitute or provide investment advice as contemplated by the Advisers Act. See Part I, Item 1. "Business-Regulation" above. The Advisers Act imposes fiduciary duties, recordkeeping and reporting requirements, disclosure requirements, limitations on agency and principal transactions between an adviser and advisory clients, as well as general anti-fraud prohibitions. Changes in legal or regulatory requirements or changes to our product lines could require additional entities in our corporate family to register as investment advisers or comply with similar requirements in other jurisdictions.
In the U.S., the SEC has sought public comment on the role of certain third-party information providers to the asset management industry, including index providers and model providers, and whether information providers are acting as investment advisers under the Advisers Act. If our index business were to be deemed an investment adviser, we could be deemed a fiduciary to our clients, increasing the costs and complexity of our business. This could also conflict with obligations under other benchmark regulations. The SEC has also proposed a rule that would prohibit SEC-registered investment advisers from outsourcing certain services or functions to service providers that do not meet minimum due diligence, monitoring and record-keeping requirements, and index providers, among others, are identified as service providers that could fall within the scope of the proposed requirements. If adopted, this rule could result in additional compliance obligations for our business.
Our ability to comply with applicable laws and regulations depends on maintaining an effective compliance program, which can be time-consuming and costly, as well as on our ability to attract and retain qualified compliance personnel. In some instances, in connection with the provision of data and services, we have incurred additional costs to implement processes and systems at the request of our clients to ensure their use of our data complies with applicable financial regulations. For example, a U.S. Executive Order prohibiting many of our clients from transacting in the securities of certain Chinese companies resulted in our decision to remove these companies from relevant indexes to support our clients' needs for indexes to be replicable in investment portfolios. To the extent that our clients are subject to increased regulation, we may be indirectly impacted, leading to higher costs that could reduce the profitability of certain products.
Additionally, there has been increased attention on and scrutiny of index providers and ESG ratings and data providers by politicians, regulators, policymakers and the media. This heightened attention may result in new or expanded regulations, investigations or other regulatory actions, which could increase compliance costs, impose operational constraints, or otherwise materially adversely affect our business, financial condition, or results of operations.