Maximum protection, the default category
“If there is not enough information to place a client in another category, the client is treated as retail: the category that gives the most protection.”
MiFID II requires you to place each client in one of three categories—retail, professional or eligible counterparty—which determine their level of protection and the firm’s obligations. We help you design a classification policy and processes that stand up to a CNMV inspection.
Free consultation
We reply within 24 h
Six building blocks that turn the classification obligation into a documented system you can defend before the CNMV: categories, criteria, communication, changes and how it fits with suitability and best execution.
We draft the policy: the three categories, the objective criteria for placing each client, the documentation required and the cases in which a client is classified as retail by default.
We design the workflow: written notice of the category to the client, information on its implications, the right to request a different classification and the assessment of change requests.
The category shapes the assessments: suitability in portfolio management and advice, appropriateness for complex products. We integrate classification and tests consistently.
For retail clients, the best result is measured in terms of total consideration. The client’s category directly affects how best execution is applied.
Each category receives a different level of information and warnings. We tailor the pre-contractual documentation to the client’s profile and the product.
Classification is not static: we review your procedures so that changes in the client’s situation are detected and each category stays up to date and traceable.
Before providing any investment service, the firm must classify the client. That decision shapes protection, assessments, information and best execution. It is the foundation for everything else.
“If there is not enough information to place a client in another category, the client is treated as retail: the category that gives the most protection.”
“Large entities and companies above certain thresholds are professional clients; a retail client can also ask for this status if they meet the requirements.”
“The eligible counterparty is a subcategory of professional client: credit institutions, investment firms, insurers or governments, for certain specific services.”
“The client can ask for more protection (always) or less (subject to requirements). A request is required; the firm assesses it and communicates the outcome in writing.”
Misclassifying a client, or failing to document the classification, taints everything that follows: information, suitability and appropriateness assessments, best execution and effective protection. It is one of the classic focus areas of conduct supervision.
The most common mistake: classifying the client incorrectly or without supporting documents, giving them less protection than they are entitled to, or misapplying the professional-on-request regime.
Classification drives everything else: if the category is wrong, the tests, information and warnings will be wrong too. An error at the base spreads across the entire client relationship.
Moving down has requirements: moving a client to a category with less protection (for example, from retail to professional) is only valid if the client meets the criteria and the process is documented.
The rules define retail, professional and eligible counterparty, with objective criteria for each and rules for changes.
Without sufficient information, the client is classified as retail, the category with the highest level of protection.
Poor classification can lead to CNMV requests for information, client complaints and the annulment of transactions.
Before the CNMV reviews it, check that the three categories are well defined, that the criteria and thresholds are applied correctly, that the professional-on-request regime is documented and that classification fits with suitability, appropriateness and best execution.
It is the obligation under MiFID II for every investment firm to place each client in one of three categories: retail, professional or eligible counterparty. Each category carries a different level of protection.
Classification determines the information provided, the assessments that apply and how best execution is applied.
It is the default category: any natural person or entity that cannot be classified as a professional client or eligible counterparty. If the firm does not have enough information, the client is classified as retail, the category with the highest level of protection.
Professional clients include, among others, regulated entities (credit institutions, investment firms, insurers, collective investment schemes), governments and public bodies and large companies that meet at least two of three thresholds: a balance sheet total of €20 million or more, net turnover of €40 million or more, or own funds of €2 million or more.
It is the regime under which a retail client can ask to be treated as a professional client, waiving part of their protection. The client must meet at least two of three requirements:
It is a subcategory of professional clients reserved for large institutional investors: credit institutions, investment firms, insurers, collective investment schemes, pension funds, governments and central banks, among others.
It applies only to certain services (execution of orders, reception and transmission of orders, and dealing on own account) and carries the lowest level of protection.
Yes. The client can request a move up (more protection, always admissible) or down (less protection, subject to requirements). The change must be requested; the firm assesses it and communicates its decision. A move to a category with less protection is only valid if the criteria are met and the change is documented.
The firm must notify each client in writing of the category they have been placed in, the implications of that classification and their right to request a different classification. This notice and the supporting documents are key in a CNMV inspection.
A professional client receives less information and fewer warnings, their knowledge is presumed for the appropriateness assessment and, in general, some safeguards designed for retail clients do not apply. The core conduct of business rules still apply, however.
Yes. In investment advice and portfolio management, the firm may presume certain knowledge and experience for professional clients. The suitability test is still required, but its scope varies with the client’s category.
The appropriateness test (complex products without advice) focuses on retail clients. Professional clients are presumed to have the knowledge and experience needed for the products covered by their category.
Yes, through the professional on request regime, if they meet at least two of the three requirements (trading frequency, a portfolio above €500,000 and professional experience). It is a voluntary option that involves giving up part of their protection.
No. The firm must keep it up to date: if the client’s situation changes or the client asks for it, the category should be reviewed. The client is also required to report relevant changes that affect their classification.
They are separate but complementary obligations. MiFID classification measures investor protection; anti-money laundering KYC identifies the client and their risk. Both are collected at the start of the relationship, but they stem from different rules.
The more protection, the more obligations for the firm. This is the foundation that every classification policy must develop and document.
Large companies are classified as professional clients if they meet at least two of these three thresholds (no request needed):
A retail client can ask to be treated as a professional client if they meet at least two of these three requirements, waiving part of their protection:
| Category | Level of protection | Who fits | Assessments |
|---|---|---|---|
| Retail | Maximum | Natural persons and entities that are neither professional clients nor eligible counterparties. Default category. | Suitability (advice/portfolio management) and appropriateness (complex products). |
| Professional | Intermediate | Regulated entities, governments, large companies (thresholds) and retail clients on request. | Suitability with presumed knowledge; appropriateness presumed. |
| Eligible counterparty | Minimum | Large institutions (credit institutions, investment firms, insurers, governments), for certain services. | Certain protection rules do not apply to those services. |
Categories and criteria under MiFID II (Directive 2014/65/EU, especially its Annex II) and Law 6/2023. The eligible counterparty is a subcategory of professional clients that applies only to certain services. Each client’s specific classification must be documented and communicated in writing, and it can be reviewed on request or on the firm’s own initiative.
Classification is not an onboarding formality: it is the piece that supports all investor protection. The key is to apply objective criteria, document them and keep them current throughout the relationship.
Each category has criteria and thresholds defined in the rules. Classifying “by feel” or for commercial convenience is the first error the CNMV spots. Everything must be based on verifiable data.
Written notice of the category, information on its implications and records supporting any changes are the proof that classification was done properly. Without evidence, compliance with the obligation is left up in the air.
The client’s situation changes. You need to review categories, handle change requests and react to new information, keeping every decision traceable.
If you want to review your classification policy or integrate it with suitability and best execution, see our securities market regulation services or the MiFID II conduct of business rules.
A well-executed client classification is not a box ticked at onboarding: it determines protection, assessments (suitability and appropriateness), information and best execution. Here is a visual panel showing how it works in practice.
1) PolicyThe starting point is a policy setting out the three categories, the objective criteria and the documentation needed to place each client with supporting evidence.
2) AssignmentClients are classified using objective criteria; retail by default. The per se professional thresholds are applied and, where relevant, the professional-on-request regime.
3) CommunicationThe client is told their category, its implications and their right to request another. The written record is what proves compliance with the obligation before the CNMV.
4) AlignmentClassification determines the suitability and appropriateness tests, the pre-contractual information and how best execution is applied (total consideration for retail clients).
Quick decisionA natural person or SME with no special requirements: retail, maximum protection.
A regulated entity or a company above the thresholds: professional, intermediate protection.
Bank, investment firm, insurer or government: eligible counterparty for certain services.
A document setting out the three categories, objective criteria, thresholds and the rules for changes.
Approved policy and current version with a change log.
Classification based on verifiable data; retail by default when information is missing.
Client record, data collected and the rationale for the category.
Verification of at least two of the three requirements and a warning about the loss of protection.
Client request, proof of the requirements and signed acceptance.
Written notice of the category, its implications and the right to request another.
Classification letter or document delivered to the client.
Periodic review and handling of changes in the client’s situation or reclassification requests.
Log of reviews and category changes throughout the relationship.
Spot them before a conduct inspection to avoid requests for information and complaints.
If you are reviewing your client classification policy, these terms appear in the documentation, in the tests and in your dealings with the CNMV. Understanding them well helps you build a consistent system.
The default category, with the highest level of protection. Any natural person or entity that is neither a professional client nor an eligible counterparty.
Intermediate protection. Experience and knowledge are presumed. Includes regulated entities, governments, large companies (thresholds) and retail clients on request.
A subcategory of professional client, with minimum protection. Large institutions, only for certain services (execution, RTO and dealing on own account).
A retail client asks to be treated as a professional client by meeting at least two of three requirements (trading frequency, a portfolio above €500,000 and professional experience).
An assessment in investment advice and portfolio management. For professional clients, certain knowledge and experience may be presumed, depending on their category.
An assessment of knowledge and experience for complex products without advice. It focuses on retail clients; for professional clients it is presumed.
A company is a professional client if it meets two of three: balance sheet ≥ €20 million, net turnover ≥ €40 million or own funds ≥ €2 million.
The client can ask for more protection (always) or less (subject to requirements). The change must be requested and assessed, and the decision communicated in writing.
The European framework for markets in financial instruments that governs client classification and conduct of business rules, transposed in Spain by Law 6/2023.
Tell us about your case and we will review your client classification policy so that it applies the categories correctly and stands up to CNMV supervision.
The obligation to classify clients stems from MiFID II (Directive 2014/65/EU, especially its Annex II) and is incorporated into Spanish law through Law 6/2023 on Securities Markets and Investment Services. Supervision lies with the CNMV, as part of the conduct of business and investor protection rules.
MiFID II distinguishes retail clients (maximum protection and the default category), professional clients (intermediate protection, by size or on request) and eligible counterparties (minimum protection, large institutions for certain services). When there is not enough information, the client is classified as retail.
A company is a per se professional client if it meets at least two of three thresholds: a balance sheet total of €20 million or more, net turnover of €40 million or more, or own funds of €2 million or more. A retail client can request professional on request treatment if they meet at least two of three requirements: an average frequency of ten significant transactions per quarter over the previous four quarters, a portfolio above €500,000, or at least one year of experience in the financial sector.
The assigned category determines the pre-contractual information, the suitability and appropriateness assessments, the warnings and how best execution is applied (for retail clients, total consideration). That is why misclassification taints the whole client relationship and is a common focus of conduct supervision. It connects directly with the MiFID II conduct of business rules, the suitability test and best execution of orders.
Key legislation, linked to the official text:
Legislation and links reviewed in .