MiFID II Product Governance Obligations: Manufacturers, Distributors and Target Market

Every instrument you manufacture or distribute needs a defined target market, a consistent distribution strategy and a periodic review that actually works. We help you set up the full cycle and evidence it.

Would your product cycle stand up to the supervisor’s questions?

Tell us whether you manufacture, distribute or both, and what product range you handle: we will send you back a diagnosis of your product governance framework.

  • 50+ entities advised
  • Reply within 24 h
  • No commitment
MiFID II organizational requirement
Art. 16(3)
MiFID II conduct of business rule
Art. 24(2)
Current version of the guidelines
ESMA 2023
Transposition in Spain
Law 6/2023

Who needs product governance (and does not always know it)

Manufacturers, distributors and firms with a dual role: four situations where this framework decides supervisory cases.

Fund manager

The fund manager (SGIIC) that launches and reviews funds

"Every launch goes through the committee, but the periodic review of our live funds ends up as a formality. We need sales data to genuinely feed back into the target market."

Bank

The distributor with a third-party catalog

"We distribute products from dozens of manufacturers. The challenge is to industrialize how we receive the target market, match it against our clients and send back sales feedback without doing it by hand."

Investment firm

The firm wearing two hats

"We design structured products and we also place them. Being manufacturer and distributor at the same time doubles the obligations, and the supervisor expects to see us meet both sides with separate evidence."

EAF

The advisor who selects products

"We don’t manufacture anything, but we recommend specific instruments. The target market of each product has to be built into our suitability tool, not left in a forgotten PDF."

Three typical cracks in product governance

When a product ends up in the wrong hands, the supervisor reconstructs the cycle backward. These are the cracks it usually finds.

Copy-paste target markets: identical generic definitions for very different products, with no granularity by knowledge, financial situation, risk tolerance or objectives. They segment nothing and protect no one.

Deaf distribution: the manufacturer defines the target market, but the distributor neither builds it into its systems nor sends back sales information. The cycle breaks exactly where the client appears.

Decorative periodic review: products whose risk or behavior has changed are still sold with the target market set on launch day, without any event having triggered a review.

Who must do what in product governance (MiFID II Arts. 16(3) and 24(2))
Role Key obligations What is at stake
Manufacturer Approval process for each product; positive and negative target market; scenario and cost analysis; consistent distribution strategy; periodic and event-driven review. Granular definitions per product and a review that reacts to sales data, not a file that is archived after launch.
Distributor Obtain the product information and its target market from the manufacturer; refine it for its own client base; distribute in line with it; send sales feedback to the manufacturer. Building the target market into sales and advisory systems, and justifying and reporting transactions outside it.
Both (dual role) Meet both sets of obligations at the same time when it manufactures and distributes, with governance that prevents one function from covering for the other; full consistency between approval, channel and sale. Separate evidence for each role: the supervisor does not accept the manufacturer’s self-checks as a substitute for the distributor’s controls.

Close the loop on your products

We build your complete product governance framework: policy, committee, target market methodology including sustainability, distribution strategy, agreements with manufacturers or distributors and the feedback loop. With the evidence the CNMV expects to find.

Product governance: common questions from firms

What is product governance and where does it come from?

It is the set of MiFID II obligations (Articles 16(3) and 24(2) of Directive 2014/65/EU) requiring financial instruments to be designed for a defined target market and distributed consistently with it, with reviews throughout their life.

The underlying idea: investor protection does not start at the point of sale; it starts with product design.

Who is a manufacturer and who is a distributor?

A manufacturer is the firm that creates, develops, issues or designs the instrument (a fund manager with its funds, an issuer of structured products). A distributor is the firm that offers, recommends or sells it to clients: banks, investment firms, and EAFs that advise on specific products.

Many firms are both at the same time and must meet both sets of obligations, with evidence kept separately for each role.

What are the positive and negative target markets?

The positive target market describes the type of client for whom the product is appropriate: client category, knowledge and experience, financial situation, risk tolerance, objectives and needs, including, following the 2023 ESMA guidelines, sustainability preferences. The negative target market identifies who the product must not reach.

Both must be granular and product-specific: a one-size-fits-all target market is the first red flag in a review.

Can you sell outside the target market?

Outside the positive target market there may be transactions justified case by case (for example, for diversification or hedging within a portfolio), always reasoned, recorded and reported through the information loop. Selling into the negative target market is the critical scenario: it must be exceptional and especially well justified and documented.

What cannot be defended is a pattern: recurring sales outside the target market show that the definition or the distribution is wrong.

What exactly must the distributor do?

Four things: obtain the product information and its target market from the manufacturer (or build it itself when the manufacturer is not subject to MiFID II), refine it for its own client base and channels, respect it in sales and advice, and send sales information back to the manufacturer, including transactions outside the target market.

The practical lever: build the target market into sales systems and into the suitability test, rather than managing it in scattered documents.

What changed with the 2023 ESMA guidelines?

The update of the product governance guidelines integrated sustainability factors into the definition of the target market, in line with the inclusion of sustainability preferences in the suitability assessment.

In practice: your methodology must cover the product’s ESG dimension and how it fits client preferences, and your product range must be reclassified under the updated framework, consistently with SFDR.

How does it relate to suitability, appropriateness and PRIIPs?

They are complementary layers: product governance filters who the instrument can reach in the abstract; suitability or appropriateness validates the transaction with the specific client; and the PRIIPs KID informs the retail investor about the packaged product.

The supervisor reads all three layers together: contradictions between the target market, the client assessment and the product documentation are ammunition for an enforcement case.

What evidence does the supervisor expect from this framework?

Minutes of the approval committee with the analysis of each product, a written target market methodology, product sheets (positive and negative), agreements and information flows with manufacturers or distributors, sales data matched against the target market, justification of transactions outside it, and periodic reviews with real consequences.

We build that repository with firms as part of our MiFID II compliance service.

Setting up a product governance cycle that runs on its own

The standard is demanding but can be systematized: approve with sound judgment, distribute with data and review with consequences. This is the sequence we implement.

Phase 1

Governance and methodology

Product governance policy, a committee with defined membership and quorum, target market methodology (including sustainability) and a map of roles: which products you manufacture, which you distribute and where you have a dual role.

Phase 2

Product-by-product rollout

Positive and negative target market sheets for each instrument, distribution strategy by channel, integration into sales and suitability systems, and information-exchange agreements with manufacturers and distributors.

Phase 3

Data, feedback and review

Periodic matching of sales against the target market, reporting of deviations, feedback to the manufacturer, event-driven review triggers and documented decisions: keep, adjust or withdraw the product.

The product cycle in 10 steps

  1. Role inventory: classify your activity product by product (manufacturer, distributor or both), because each role triggers its own set of obligations.
  2. Policy and committee: approve the product governance policy and set up the approval committee with its functions, members and meeting frequency.
  3. Target market methodology: define the categories of analysis (client, knowledge, finances, risk, objectives, sustainability) and their minimum granularity.
  4. Negative target market: for each product, identify who it must not reach, with the same rigor as the positive one.
  5. Distribution strategy: assign each product to channels and services consistent with its complexity and its target market.
  6. Information agreements: agree with manufacturers and distributors on what data flows, in what format and how often, in both directions.
  7. Systems integration: bring the target market into sales, advisory and suitability tools so that it blocks or alerts in real time.
  8. Deviation management: define how a sale outside the target market is justified, recorded and reported, and who authorizes it.
  9. Sales feedback: send and request periodic information on sales and deviations; the cycle breaks when the data does not get back to the manufacturer.
  10. Review and consequences: schedule periodic and event-driven reviews, and document the decisions: keep, recalibrate the target market or withdraw.

To fit this cycle with the rest of your conduct obligations, see our MiFID II compliance service and the MiFID II overview.

Free resource · PDF

Download the MiFID II Checklist

The 10 conduct controls the CNMV expects to see working in an EAF or investment firm, with the typical evidence for each. Ideal as a quarterly self-assessment with your team.

  • The 10 essential conduct controls
  • The evidence expected for each control
  • 5 signs that a control exists only on paper
  • Professional PDF · 5 pages · 11 KB

No spam. Your email is only used to send you this checklist and, occasionally, relevant regulatory updates.

Your download has started

The checklist is downloading right now. If it does not start automatically, click here.

After reading it, do you need help implementing any of the steps? Write to us directly:

Working glossary

Product governance glossary

The concepts that shape policies, distribution agreements and supervisory requests for information in this area.

Product governanceFramework

The monitored life cycle

Obligations covering the design, approval, distribution and review of financial instruments under MiFID II Arts. 16(3) and 24(2).

Applies to manufacturers and distributors.
ManufacturerRole

The one who creates the product

Firm that designs, issues or develops instruments: it defines the target market, scenarios, distribution strategy and review.

Also called producer or originator.
DistributorRole

The one who puts it in the client’s hands

Firm that offers, recommends or sells the product: it refines the target market, respects it and sends back sales data.

Banks, investment firms and EAFs fall into this group.
Positive target marketDesign

Who the product is for

Client profile the product is aimed at: category, knowledge, financial situation, risk, objectives and sustainability.

Granular and specific to each product.
Negative target marketDesign

Who it is not for

Client profile incompatible with the product. Selling in this zone requires exceptional justification and enhanced record-keeping.

Patterns here trigger enforcement cases.
Distribution strategyChannel

Where it should be sold

Definition of the channels and services suited to the product: advised, non-advised, execution-only, with or without restrictions.

It must match the product’s complexity.
Approval committeeGovernance

The entry filter

Internal body that validates each new product or significant change before it is manufactured or distributed.

Its minutes are key evidence.
Sales feedbackData

The data that closes the loop

Information the distributor sends back to the manufacturer: volumes, profiles reached and transactions outside the target market.

Without feedback there is no useful review.
2023 ESMA guidelinesStandard

Today’s yardstick

Update of the product governance guidelines that integrates sustainability factors into the target market.

Reclassify your product range in line with them.
Product playbook

The cycle’s obligations and their evidence

Obligation
What is expected
Typical evidence

Product approval

No instrument is manufactured or added to the catalog without going through the approval process with a documented analysis.

Approved policy, committee minutes with the analysis for each product, and a log of decisions and conditions.

Defining the target market

Granular positive and negative target markets for each product, using the categories of the 2023 ESMA guidelines, sustainability included.

Written methodology and versioned target market sheets for each instrument.

Channel strategy and control

Each product assigned to channels and services consistent with its complexity, with blocks or alerts in the sales systems.

Product-channel matrix, system configuration and samples of blocks or alerts triggered.

Information exchange

A working two-way flow: the distributor receives the target market and product data; the manufacturer receives sales and deviations.

Exchange agreements or protocols, periodic reports sent and received, and their traceability.

Periodic and event-driven review

Scheduled reviews and event triggers (changes in risk, complaints, unusual sales) with decisions that follow through.

Review calendar, reports with matched sales data, and decisions to keep, adjust or withdraw.

Signs that your product governance exists only on paper

If any of these sounds familiar, the cycle is broken somewhere and should be fixed before the next supervisory review.

  • The target markets for your entire range fit into a single template, and no product has a detailed negative target market.
  • You distribute third-party products without having received (or read) the manufacturer’s target market information.
  • Your sales systems do not know what the target market is: control depends on each relationship manager looking it up in a repository.
  • No one has sent or requested sales feedback in the last year, and transactions outside the target market are not identified.
  • Products with significant changes in risk or returns are still sold with the original launch sheet.

Book a call

Tell us which products you manufacture or distribute and through which channels: we review your product governance framework, from the approval committee to sales feedback.

Product governance under MiFID II: the full cycle, from design to withdrawal

Product governance is MiFID II’s response to a lesson learned the hard way: harm to investors does not originate when the order is signed; it originates earlier, when a poorly designed or poorly targeted product enters the sales channel. Articles 16(3) and 24(2) of Directive 2014/65/EU, transposed in Spain by Law 6/2023, require manufacturers and distributors to define a target market for each instrument, to distribute it consistently with that target market and to review it throughout its life. For fund managers, banks, investment firms and EAFs, it is one of the frameworks where the CNMV draws the sharpest line between written policies and cycles that actually work.

Manufacturer obligations

Whoever designs or issues the product must put it through a prior approval process, define its positive and negative target market with granularity (type of client, knowledge and experience, financial situation, risk tolerance, objectives and, following the 2023 ESMA guidelines, sustainability factors), analyze scenarios and costs, set a distribution strategy consistent with the instrument’s complexity and establish a periodic review, also triggered by events, that may lead to recalibration or withdrawal. The key evidence is the approval committee minutes and the versioned product sheets.

Distributor obligations

Whoever offers, recommends or sells must obtain the product information and its target market from the manufacturer, refine it for its client base and channels, respect it in sales and advice (building it into its systems and into the suitability test) and send back sales feedback, including transactions outside the target market with their justification. When the manufacturer is not subject to MiFID II, the distributor builds the target market itself with the information available. Sales in the negative target market are the most sensitive ground: they must be exceptional, reasoned and recorded.

Sustainability and the 2023 ESMA guidelines

The 2023 update of the product governance guidelines integrated sustainability factors into the definition and review of the target market, in parallel with their inclusion in the suitability assessment. For firms, this means reclassifying the product range, aligning product information with SFDR and ensuring that clients’ ESG preferences are matched with correctly characterized products. A catalog whose target market sheets lack a sustainability dimension is working today with an outdated methodology.

What lies ahead and how we work on this framework

Scrutiny of product value is increasing: the Retail Investment Strategy, still under negotiation, revolves around value for money and benchmarks, and the PRIIPs KID already requires packaged products to be presented transparently. Our work with firms covers the entire cycle: policy and committee, target market methodology, information-exchange agreements, systems integration, deviation management and preparation of evidence for the CNMV, as part of our MiFID II compliance service and the general MiFID II framework.

Art. 16(3) Art. 24(2) MiFID II 2023 ESMA guidelines Target market Law 6/2023 CNMV