Portugal's securities watchdog generates millions in supervisory fees but can't spend them freely—and that budget straightjacket could affect how quickly your broker gets licensed, how fast fraud gets detected, and whether the regulator can compete with Frankfurt and Paris for the talent needed to protect your investments.
The Portugal securities regulator CMVM is grappling with resource constraints that undermine its ability to operate effectively, despite being entirely self-funded through supervisory fees—a structural contradiction that has drawn sharp criticism from the agency's leadership and raises questions about the country's regulatory architecture.
A Quick Primer: What Does CMVM Actually Do?The CMVM oversees everything from Lisbon's stock exchange (Euronext Lisbon) to your investment advisor's license, crypto platforms, and whether companies are following disclosure rules—essentially, it's the agency that stands between you and market fraud.
Why This Matters:
• Zero State funding, but capped spending: CMVM generates its own revenue yet cannot freely deploy it due to legal restrictions.
• Talent flight risk: The agency struggles to retain specialists as European hubs in Frankfurt, Paris, and Brussels offer superior pay and career paths.
• AI ambitions stalled: Plans to modernize with artificial intelligence tools require significant investment, but budgetary handcuffs may delay critical upgrades.
A Self-Funded Regulator with Its Hands Tied
Luís Laginha de Sousa, president of the Comissão do Mercado de Valores Mobiliários (CMVM), recently told lawmakers that his agency operates in a fiscal paradox. Although the CMVM does not draw a single euro from Portugal's State Budget and instead finances itself entirely through fees levied on supervised entities, it remains legally restricted in how it can deploy those revenues. This model, common among European regulators, is supposed to guarantee independence. In practice, Laginha de Sousa argues, it has become a straightjacket.
During a parliamentary hearing convened by the Socialist Party (PS) within the Coordination Commission for Policies to Combat Money Laundering and Terrorist Financing, the CMVM president emphasized that while the agency is expected to meet growing supervisory demands, it lacks the flexibility to hire, invest, or scale up operations at the pace required. He has already raised these concerns with the Portugal Ministry of Finance as part of the Commission for Strengthening the Independence of Regulatory Entities, advocating for a legislative overhaul that would permit the CMVM to "fulfill its function more effectively without burdening the State."
The European Burden: AMLA's Data Appetite
A significant driver of resource strain is the newly operational Anti-Money Laundering Authority (AMLA), the EU's central supervisory body for anti-money laundering and counter-terrorist financing. Having assumed its mandate from the European Banking Authority in January 2026, AMLA is now in an intensive preparatory phase ahead of full enforcement powers in 2028.
The authority has been issuing a steady stream of data requests to national regulators like the CMVM, including a data collection and testing exercise launched in March 2026 to calibrate risk assessment models across the Union. National supervisors were given until 22 April to submit detailed filings, and a further round of reporting—requiring identification of entities provisionally eligible for direct AMLA supervision—is due by 15 August 2026. A provisional list of high-risk transnational institutions is expected by late September.
For the CMVM, these exercises represent a "huge cost," Laginha de Sousa said, particularly given the agency's limited headcount and budget constraints. "What goes to one side cannot go to the other," he warned, pointing to the zero-sum trade-off between compliance with European obligations and day-to-day supervisory work in Portugal's capital markets.
AMLA's ambitions extend beyond data gathering. The authority is developing a suite of regulatory technical standards (RTS) on risk variables, customer due diligence, and enforcement, many of which are due by 10 July 2026. It is also preparing a central AML/CFT database set to go live in 2027. While these initiatives aim to harmonize enforcement and close loopholes, they impose a substantial administrative load on national agencies that are already stretched thin.
Competing for Talent in a Two-Tier Europe
Beyond compliance costs, the CMVM faces a more insidious challenge: retaining skilled professionals in a labor market where European financial centers offer significantly better compensation and career prospects. Laginha de Sousa noted that AMLA and other EU authorities based in Frankfurt, Paris, and Brussels are now actively recruiting specialists with the exact competencies the CMVM needs—regulatory expertise, data analytics, AML proficiency—and doing so with budgets and salaries that Portugal's regulator cannot match.
While Portugal has attracted digital nomads and remote workers with its cost-of-living advantages, public sector regulatory salaries haven't kept pace—creating a particularly acute problem for specialized roles where private sector fintech firms and EU institutions can offer 50-100% salary premiums.
According to labor market research, Portugal's financial sector already faces an 84% recruitment difficulty rate, exceeding the global average. A 2025 study by Aon found that 46% of Portuguese workers were actively seeking new opportunities or considering a job change within 12 months, with one-third citing feeling undervalued in terms of pay and benefits.
For the CMVM, this creates a vicious cycle: the agency invests in training and developing staff, only to see them lured away by better-funded European institutions or private-sector firms. The regulator's staff work under individual employment contracts rather than civil service tenure, which offers flexibility but less long-term security—a structure that may further erode retention in a competitive market.
AI Ambitions Meet Budget Realities
The CMVM has ambitious plans to modernize its supervisory toolkit with artificial intelligence and business intelligence systems. The agency's SupTech Strategic Plan for 2026 envisions AI-driven automation for market surveillance, fraud detection, and complaint analysis. These tools are intended to make supervision faster, more data-driven, and better calibrated to risk—an essential upgrade as the CMVM takes on new responsibilities under regulations like MiCA (Markets in Crypto-Assets) and DORA (Digital Operational Resilience Act).
However, Laginha de Sousa has repeatedly cautioned that deploying AI will "require significant financial and technical resources." The CMVM has asked the Portugal Ministry of Finance for permission to tap accumulated reserves—so-called "captive balances"—to fund these structural investments, arguing that the agency's current operating budget is inadequate for capital expenditures of this scale.
Without access to these funds, the CMVM risks falling behind peer regulators in Europe that are already integrating machine learning and predictive analytics into their oversight frameworks. The European supervisory authorities, including ESMA (European Securities and Markets Authority), have also issued warnings about the risks of AI in investment advice, noting that algorithmic tools can generate imprecise or misleading guidance that leads to investor losses—a concern that underscores the importance of regulators themselves having robust AI capabilities to monitor the market.
Portugal's broader National AI Agenda (ANIA), launched in January 2026, commits over €400M through 2030 to accelerate AI adoption across the economy and public administration. Yet a study from April 2026 found that while 75% of financial institutions in Portugal are already using AI, governance frameworks remain deficient. The CMVM's own modernization efforts, hampered by budgetary constraints, exemplify this lag.
What This Means for Investors and Market Participants
For individuals and firms operating in Portugal's capital markets, the CMVM's resource constraints have tangible, real-world implications. Slower response times could mean longer waits for investment product approvals, delays in enforcement actions against fraudulent schemes, or gaps in monitoring of crypto-asset platforms that residents increasingly use. For expats managing cross-border investments, an under-resourced CMVM may struggle to provide timely guidance on compliance with both Portuguese and EU rules.
A regulator that cannot retain talent, invest in technology, or respond nimbly to new risks is less effective at protecting investors, detecting fraud, and ensuring fair and orderly markets. The agency's struggle to balance European reporting obligations with domestic oversight may also lead to slower enforcement actions and market surveillance across all asset classes.
On the other hand, the CMVM's strategic roadmap for 2026—embedded in its 2025–2028 Strategic Plan—does include initiatives aimed at bolstering investor confidence, such as enhanced supervision of crypto-asset service providers, stricter digital resilience standards, and a proposal for an individual savings and investment account to be presented to the government. Whether these priorities can be delivered on time and at scale will depend heavily on whether the agency secures the budgetary and regulatory flexibility it is seeking.
Structural Reform on the Horizon?
The CMVM's predicament illustrates a broader tension in Portugal's regulatory model: how to balance oversight independence with fiscal discipline. While self-funding models are designed to insulate regulators from political pressure, they can also create perverse incentives if agencies cannot reinvest their revenues to meet evolving mandates.
Laginha de Sousa's appeals to the Ministry of Finance and the Commission for Strengthening the Independence of Regulatory Entities suggest that policymakers are aware of the problem. The question now is whether legislative changes will follow—and whether they will come in time to prevent a capability gap that could undermine Portugal's competitiveness in European capital markets.
For the CMVM, the stakes are clear: without the freedom to deploy the resources it generates, the regulator risks being outpaced by both the demands of European integration and the ambitions of its own strategic plan. The outcome of this debate will shape not only the agency's future, but the quality of financial oversight available to everyone who invests, trades, or does business in Portugal.
