The Price Reporting
Standard

In light of the potential implications of the SABR designation and the ongoing consultation, an opportunity has arisen for commodity PRAs to position an internal designation likelihood assessment against the Specified Authorised Benchmarks Regime — not as an imperative reaction, but as a considered, strategic move taken from a posture of internal evaluation rather than external pressure.

The firms that take that opportunity will be positioned when the designation criteria become available — methodologies documented, oversight evidenced, audit trails intact and a defensible case for the benchmarks they intend to anchor. Firms that do not run the risk of retrofitting their compliance architecture against a standard the FCA is actively writing, in a market where the most-referenced commodity prices are being claimed by the administrators who got there first.

SABR removes the universal authorisation regime that currently applies to all benchmarks under BMR. It introduces a designation framework that will concentrate regulatory recognition around the benchmarks the FCA judges systemically important. And it gives the FCA fresh discretion to write the firm-facing requirements for designated administrators — without the Annex II commodity-specific provisions that exist today. The administrators best prepared to demonstrate compliance maturity will shape what those requirements look like in practice. The administrators who are unprepared will be measured against them.

So what should compliance leadership be thinking about right now?

Mapping the portfolio against designation likelihood

The factors relevant to designation, as set out in the consultation, can be assessed across three dimensions — with systemic significance emerging as the conclusion drawn from them.

Assessment-level liquidity

Two questions sit beneath this dimension. How active is the underlying physical market — measured in transaction volume, frequency and breadth of participants? And how robust is the data flow into the methodology — the number of price points captured, the diversity of contributors and the ability of the assessment process to function in volatile or thin conditions? A benchmark built on a liquid market with poor data capture is weaker than one built on a less liquid market with comprehensive data capture. Both layers need to be tested — from a compliance lens through review of assessments against methodology criteria, and from a business lens through commercial dependence and substitution risk.

Breadth of dependence

How embedded is the benchmark in the contractual ecosystem? This is the test of how widely the assessment is referenced — in physical supply contracts, hedging programmes, financial settlement and risk management frameworks. The audit trail of contractual dependence is the evidence the FCA will weigh against the substitution question: if this benchmark were withdrawn, how disruptive would the substitution process be?

Financial instrument referencing

How directly does the benchmark connect to regulated financial markets? Does it settle exchange-traded derivatives? Is it written into ISDA documentation? Does it anchor structured products or feature in cleared OTC swaps? This dimension tests proximity to the regulated financial system specifically, which is distinct from breadth of dependence — a benchmark may be widely referenced in physical contracts without ever settling a financial instrument, and conversely a benchmark may settle a derivative contract without commanding broad commercial dependence. Both contribute to systemic significance, but they generate different evidence and engage the FCA's mandate to different degrees.

Systemic significance is the conclusion the FCA will draw from these three dimensions taken in concert — observed as a profile across them rather than calculated as a sum. A benchmark meeting the threshold typically scores highly on at least two of the three dimensions, with the third providing supporting evidence. No single dimension is sufficient on its own, and a profile that is moderately positive across all three is generally insufficient. The FCA's judgement will be holistic but not arithmetic — and the difference between a designation candidate and a non-candidate is often whether the profile is strong on the dimensions that matter for the specific market the benchmark serves.

This piece offers one approach to mapping the portfolio. Other compliance functions will reach the same conclusions through different routes — weighting the dimensions differently, segmenting by commodity class or running the assessment at the methodology level rather than the benchmark level. The framework that follows is illustrative, not prescriptive. One may argue what matters is that the assessment is being done — proactively.

Mapping the consultation from a PRA perspective should result in the following tiered map, each tier carrying different potential implications under the SABR designation framework.

Tier one — strong designation case. The benchmark profile meets the systemic significance threshold across multiple dimensions. The implication is statutory: the compliance function is preparing for FCA designation. Methodology documentation, oversight evidence, audit trail integrity and governance maturity must be defensible against FCA requirements that will be written fresh — without the Annex II commodity-specific provisions to fall back on. The work here is preparing a designation case the FCA can accept with confidence.

Tier two — judgement territory. The benchmark profile is mixed. Some dimensions support the designation case, others do not. The implication is strategic. The firm faces a choice: invest in strengthening the dimensions where the case is weak, or position the benchmark for voluntary IOSCO alignment as the primary quality signal. The decision depends on the benchmark's commercial value, the cost of defending designation and what the user base expects of the assessment. This is where the most strategic compliance work sits — and where the most operationally interesting decisions are made.

Tier three — falling out of statutory scope. The benchmark profile does not meet designation criteria. Statutory regulation no longer applies. The compliance question becomes whether to maintain voluntary IOSCO alignment as a market quality signal, right-size governance to reflect non-designated status, or in some cases retire benchmarks that no longer justify the architecture. This is where the most efficiency can be captured — and where the most honest internal conversations need to be had about which benchmarks the firm should continue to publish.

The map is the foundation for every subsequent decision in the rest of this piece.

One likely implication — how the market will respond

One implication that can be drawn from this tiered view is anticipation of how the market itself will respond. It can be expected that the clustering dynamics of the commodity benchmark market will re-stratify in the wake of SABR — and a compliance function thinking ahead can position the firm to be on the right side of that re-stratification rather than reacting to it. This is the territory where compliance considerations begin to dictate business and market dynamics, and the value of compliance to the business is most clearly expressed.

The commodity benchmark market is already clustered. Multiple PRAs publish assessments of the same underlying physical markets, with users referencing competing benchmarks for the same commodity. Platts anchors Brent. Argus and Platts both publish WTI assessments in different reference forms. Iron ore 62 percent Fe has the Platts IODEX, with competing assessments from Fastmarkets and Argus. LME copper sits with the exchange itself for the official settlement, with PRA assessments layered around it. These clusters exist because users want competing reference points and because the underlying markets support methodological diversity.

What is less commonly observed is that within each cluster there is already a hierarchy. Platts dominates oil. Fastmarkets dominates certain metals concentrates. Argus dominates Russian crude grades. The dominance is built on tenure of assessment, first-mover advantage, methodology robustness, breadth of contractual referencing, methodology type — whether the price is assessed or derived — and the integrity of any conversion logic where the price is derived from upstream inputs. The same dimensions that drive designation likelihood. The hierarchy is not new. SABR will not create it. SABR will re-stratify it.

The mechanism by which this re-stratification happens has parallels in recent regulatory history. When SONIA replaced GBP LIBOR, regulatory recognition created an immediate hierarchy among sterling interest rate benchmarks that was absent under the previous regime. Competing alternatives became commercially difficult to sustain once SONIA had statutory weight. Under the EU BMR equivalence framework, benchmarks from jurisdictions that have not been granted equivalence have proven difficult to use in regulated EU institutional contexts — not because they are prohibited, but because the alternative pathways are cumbersome enough that many overseas administrators have effectively been excluded from the EU institutional market. In both cases, regulatory recognition operated as a competitive variable, not just a compliance requirement.

The same dynamic will apply under SABR, but within the existing commodity benchmark clusters rather than across the market as a whole. Designation will become a new layer of competitive positioning within clusters that are already stratified. Where two PRAs publish materially comparable assessments of the same physical market and only one is designated, the non-designated alternative does not disappear. Subscribers, however, will increasingly face questions from their own internal audit functions, risk committees and counterparties about why they rely on a price reference that does not carry the regulatory standing of the alternative. Those questions accumulate.

This is where market-driven expectation meets statutory recognition. In an unregulated environment users still demand governance assurance — they just demand it through quality signals rather than regulatory authorisation. Under SABR, both signals will be operating in parallel. Designation will be the primary signal in tier one. Voluntary IOSCO alignment will be the primary signal in tier three. In tier two, the choice between pursuing designation and positioning for voluntary alignment will itself become a competitive variable that users observe and weigh.

A PRA assessing its position needs to understand both where it currently sits in the existing cluster hierarchy and how designation will shift that position. A PRA dominant in an existing cluster but unprepared for designation may find its competitive lead eroded by a smaller competitor that has done the work. A PRA in a secondary position within a cluster may find designation a route to closing the gap — if the underlying compliance architecture supports it.

Moving consultation to internal review

What makes this moment unusual is the buy-in it can unlock. The SABR consultation creates a regulator-prompted reason to bring the price portfolio into focus from a fresh lens — to demonstrate to the business that change is in motion rather than set in stone, and that the work of evaluating the portfolio against potential designation criteria is the work of strategic positioning, not reactive compliance.

The mechanism for that work is the benchmark oversight committee itself, supported by oversight systems and the individuals who run them. The committee agenda becomes the place where consultation implications are translated into examinable questions about the firm's current architecture. The questions below, organised by tier, are the leads that drive direction, build the case for buy-in and root new ways of looking at the portfolio from compliance, regulatory and operational lenses.

Tier one — categorical questions for designation candidates

• Is the methodology documentation current, complete and consistent with operational practice — and can that consistency be evidenced in writing?
• Has the oversight framework been independently assured within the last twelve months, and is the assurance report defensible against fresh FCA scrutiny?
• If designation came tomorrow, what does the evidence pack contain — and is each component ready for production without remedial work?
• Where are the gaps between documented compliance and operational reality, and what is the cost and timeline to close them?
• Who within the firm is accountable for designation readiness, and is that accountability documented at executive committee level?

Tier two — deliberative questions for judgement-territory benchmarks

• Where the designation case is mixed, do we invest in strengthening the weak dimensions or position the benchmark for voluntary IOSCO alignment as the primary quality signal?
• What is the commercial value of the benchmark to the firm and does that value justify the cost of defending designation?
• What does the user base actually expect of this assessment going forward — statutory recognition, voluntary IOSCO alignment or simply continued methodological credibility?
• If we choose voluntary alignment, what governance overhead do we maintain and what do we release — and how is that decision communicated externally?
• How are these decisions sequenced relative to the wider portfolio and which require executive committee escalation rather than oversight committee resolution?

Tier three — opportunity-shaped questions for non-designated benchmarks

• With statutory regulation removed, what does the firm choose to do with the latitude this creates — maintain, right-size, consolidate or retire?
• Are there benchmarks in the portfolio that have been carried by regulatory inertia rather than commercial logic, and is now the moment to address them?
• Where governance overhead has historically been distributed evenly across the portfolio, what differentiated approach makes sense in a tiered regime?
• Could selected non-designated benchmarks be positioned as voluntary IOSCO-aligned premium products — signalling quality assurance to the user base in a market where statutory recognition no longer exists?
• What investment in market intelligence, methodology innovation or new benchmark development becomes possible if compliance overhead releases at this tier?

The questions are the agenda. The discipline is in answering them.

Operational decisions and their options

The above strategy converges on three decisions every PRA needs to make in the next six to twelve months. Each presents three viable options, and each option carries different commercial, regulatory and reputational consequences. This is the work of a compliance function operating in strategic mode — striving for positioning and a posture of internal evaluation rather than reaction.

Designation positioning — what the firm chooses for its tier one benchmarks

• Pursue designation as a deliberate competitive position — accepting the documentation, oversight and governance burden as the price of statutory recognition that protects against subscriber loss to designated alternatives within the same cluster.
• Remain neutral and respond to FCA assessment as it develops, preserving optionality but ceding the ability to shape how designation criteria are applied to the firm's specific benchmarks.
• Argue against designation for specific benchmarks where the burden outweighs the credibility benefit, accepting the strategic risk that comes with declining statutory recognition.

The first option requires confidence in the underlying compliance architecture. The third requires a credible alternative quality signal — typically robust voluntary IOSCO alignment — that the user base recognises as comparable.

Tier three governance posture — what to do with benchmarks falling out of scope

• Maintain current IOSCO alignment as a voluntary quality signal, accepting governance overhead beyond regulatory requirement in exchange for unambiguous market positioning.
• Right-size to a lighter framework proportionate to non-designated status, reducing cost while preserving baseline credibility for the user base.
• Consolidate or retire benchmarks that no longer justify the architecture, treating SABR as the moment for an honest portfolio review.

Each option signals something different to subscribers and to the wider market. The first signals premium quality. The second signals proportionate stewardship. The third signals strategic discipline.

Audit scope — how the next assurance cycle is structured

• Maintain the current annual assurance scope across the full portfolio, treating SABR as a regulatory transition rather than an audit re-architecture event.
• Tier the assurance review to match the designation hierarchy, with separate scopes for designated and voluntary streams within a single engagement.
• Commission distinct engagements for the two streams, potentially with different auditors, allowing the firm to optimise auditor expertise against the specific demands of each stream.

The choice affects engagement cost, evidence packaging and how IOSCO compliance is communicated externally. It also affects the firm's relationship with its assurance provider — and whether that relationship needs to be re-tendered as the regulatory landscape changes.

These are not abstract questions. Each requires a position, a budget and a defensible rationale.

Identifying the redundancies

SABR creates the opportunity to look at the compliance architecture honestly. The current BMR framework treats every benchmark identically. The designation regime permits — and effectively requires — differentiation.

A well-run compliance function uses the transition to right-size. Investment goes where designation demands it. Resource releases where deregulation permits it. Governance overhead built for tier three benchmarks under universal regulation is overengineered in the new framework. Governance built for tier one benchmarks in a designation environment may be under-engineered. Both gaps need to be identified and closed.

The PRAs that capture this opportunity will emerge from the transition leaner, more strategically focused and with a clearer compliance narrative for users than the ones that simply transcribe their existing architecture into the new regime.

The PRAs that emerge well from SABR will not be the ones with the most polished consultation responses. They will be the ones whose committees were already running these assessments, whose portfolios were already mapped and whose action plans were already drafted before the final framework was published.

Karim Bihi · The Price Reporting Standard

Regulated reporting regimes look different on the surface. Benchmarks. Energy prices. Legal accounts. Trade data. The substantive content varies, the regulators vary, the legal foundations vary. But strip them back and the same four design questions keep appearing — who controls the methodology, how is data integrity assured, who can challenge the output and what happens when it goes wrong.

That is the grounding logic IOSCO demonstrates. The IOSCO Principles for Oil Price Reporting Agencies and the IOSCO Principles for Financial Benchmarks were written specifically for benchmark administrators, but the design logic they encode is the design logic of every regulated reporting regime that takes itself seriously. A practitioner who has built and audited IOSCO compliance has, in effect, internalised an analytical framework that maps directly onto reporting regimes across financial services, professional conduct, energy markets and trade transparency.

This piece walks through the four questions, applying each first to IOSCO and then across other regulated reporting domains, to demonstrate the framework in action.

1. Who controls the methodology?

In IOSCO terms, this is Principle 14 — methodology transparency, the documented procedure by which a benchmark is constructed, the change control process and the independence of the methodology owner from commercial interests. A robust IOSCO compliance posture requires methodology to be published, version-controlled, reviewed periodically and protected from unilateral change by commercially conflicted parties.

The same question structures every other regulated reporting regime. Under the SRA Accounts Rules, the methodology is the framework for handling client money — how it is segregated, reconciled and reported — and control sits with the firm's COFA, with rule changes determined externally by the SRA. Under Ofgem's regulated price reporting for energy suppliers, methodology covers tariff construction, cost allocation and customer-facing disclosure, with control increasingly centralised at the regulator as the price cap regime has matured. Under EMIR trade reporting, methodology defines what data must be captured, in what format and within what timeframe — with technical standards owned by ESMA in the EU and the FCA in the UK.

The question is the same across all four. The answer determines whether the regime is genuinely independent of the parties whose conduct it measures.

2. How is data integrity assured?

For IOSCO, this is the cluster of principles around data sufficiency, contributor due diligence and assessment process integrity. The benchmark administrator must demonstrate that the data underpinning the assessment is verified, the contributors are vetted and the process for combining inputs into a published number is auditable end to end.

The parallel in the SRA framework is the requirement for independent reconciliation of client account balances and the role of the Reporting Accountant in providing external verification. The integrity of legal accounts depends not on assertion but on documented reconciliation against bank records and external review. In the energy sector, Ofgem's data integrity requirements rest on metering, settlement systems and the elaborate machinery of MRA and BSC arrangements that ensure the data flowing into supplier reporting is verifiable upstream. EMIR trade reporting depends on ARM and trade repository validation, transaction matching across counterparties and the evolving role of UTI and UPI standards in ensuring data identity across the reporting chain.

In every case, the underlying principle is the same: a regulated report is only as credible as the verifiability of the data behind it.

3. Who can challenge the output?

IOSCO requires a documented complaints procedure, an independent oversight function and external assurance review. A subscriber, contributor or affected party who believes a benchmark has been constructed incorrectly must have a route to challenge it that is genuinely accessible and genuinely independent of the publishing function.

The same architectural requirement appears across regimes. SRA professional conduct review allows complaints about solicitor conduct to be escalated to the SRA itself, with the Solicitors Disciplinary Tribunal sitting above as the independent adjudicator. Ofgem maintains the energy ombudsman scheme as the independent challenge route for consumers who dispute supplier billing or reporting. EMIR provides for trade data error correction protocols and competent authority intervention where reported data is found to be defective.

Challenge mechanisms are the bond of credibility for any reporting regime. They are also the part most often built thinly — present on paper, weak in practice. The genuine independence of the challenge function is the test that distinguishes a robust regime from a performative one.

4. What happens when it goes wrong?

For IOSCO, breach response involves regulatory engagement, methodology suspension where appropriate and structured remediation that preserves the integrity of historical published data. The governance framework specifies who authorises a suspension, how it is communicated and how the published record is maintained through the disruption.

The SRA equivalent is the intervention regime — the formal mechanism by which the SRA can take over a firm's client account where breach is established, with clear protocols for client money protection and documented remediation. Ofgem's Supplier of Last Resort process is the equivalent in the energy market — the framework that allows orderly transition of customers when a supplier fails. EMIR's response architecture covers reporting suspension, error correction at the trade repository level and competent authority enforcement against persistent reporting failures.

Across all four regimes, the design question is whether the regime can absorb a failure without compromising the integrity of the system as a whole. The strength of the failure response is the test of whether the architecture is genuinely robust or merely cosmetically compliant.

The transferable framework

These four questions — methodology control, data integrity, challenge mechanisms, failure response — are the grounding logic of every regulated reporting regime that functions. Stripping back IOSCO and comparing it against other regimes makes that grounding visible. A practitioner who has built and audited compliance against the IOSCO Principles has not learned a niche framework; they have learned a universally applicable mode of thought, expressed in one specific regime.

That is why mastery of IOSCO transfers. The same grounding logic applies across financial services regulation, professional conduct supervision, energy market oversight and trade transparency. The substantive expertise differs by domain. The mode of thought is the same.

Karim Bihi · The Price Reporting Standard

The annual assurance opinion produced under the IOSCO Principles for Price Reporting Agencies — the International Organization of Securities Commissions' voluntary global standards for benchmark governance — has served the commodity benchmark market well. It established a credible external standard, created accountability where none previously existed and gave benchmark users a governance signal they could rely on. It was built for the world it arrived in. That world is changing, and the opinion is changing with it — not by design, but because the pressures accumulating around it are structural rather than incidental.

Three shifts are already in motion. Each is visible in what the market has already done, not in what it might do. Each carries specific implications for the compliance function inside a price reporting agency (PRA) and for the assurance providers whose practices are built around it. Taken together they describe a compliance architecture that will look materially different by the end of this decade from the one that exists today.

This piece names each shift, argues it from the evidence already in the public record, and draws the operational implication plainly. It does not predict the unpredictable. It identifies the trajectories that are already running.

The regulatory framework is bifurcating — and compliance cannot remain uniform

The EU Benchmark Regulation amendments (EU BMR) that took effect on 1 January 2026 removed an estimated eighty to ninety percent of benchmark administrators from statutory scope. The Specified Authorised Benchmarks Regime (SABR) proposed by HM Treasury in December 2025 signals an equivalent concentration in the UK — designation limited to systemically important benchmarks, with the Financial Conduct Authority (FCA) retaining discretion to write the substantive requirements for designated administrators from scratch, without the Annex II commodity-specific provisions that currently structure the compliance obligation.

Two things are happening simultaneously. The statutory perimeter is narrowing to concentrate regulatory weight on the benchmarks that matter most systemically. And the compliance obligation for those benchmarks is, if anything, becoming more demanding — not less — because designated status under SABR and critical benchmark status under EU BMR attract the full force of a regulatory regime that is no longer diluted across a large population of minor indices.

The result is a bifurcation. At the top of the portfolio, where benchmarks settle derivative contracts and anchor physical term pricing across global supply chains, the compliance architecture must be built to survive designation scrutiny — evidence-based, continuously maintainable and defensible to a regulator who has chosen to concentrate its attention. Below that tier, the statutory obligation has been removed, and the compliance question is no longer regulatory but commercial: what governance is necessary to maintain market credibility when the regulator is no longer requiring it?

These are not questions that can be answered with a single compliance framework applied uniformly across the portfolio. They require differentiation — and differentiation requires an honest assessment of where each benchmark sits and what its users actually expect of it. The compliance function that treats a tier one designated benchmark and a tier three voluntary-alignment benchmark as carrying the same compliance burden is overengineered in one direction and potentially exposed in the other.

The practical implication is that the annual assurance review, currently scoped across the full portfolio, will need to be redesigned. Not abandoned, but restructured to reflect a market that no longer treats all benchmarks as equivalent. The scope, the evidence standard and the auditor relationship will all need to be differentiated by tier. The compliance functions that begin that redesign ahead of designation — rather than in response to it — will produce a stronger evidence position and a more defensible cost structure.

---

The Chinese regulatory perimeter is tightening — and most Western PRAs are unprepared

The most consequential compliance development for commodity price reporting over the next five years is not happening in London or Brussels. It is happening in Beijing, and it has been accumulating quietly in the regulatory architecture for longer than most Western compliance functions have been watching it.

China's data sovereignty framework — the Data Security Law (DSL), the Personal Information Protection Law (PIPL), the Cybersecurity Law (CSL) and the Counter-Espionage Law as amended in 2023 — applies to data generated or processed within Chinese territory, including price data submitted by Chinese market participants to overseas benchmark administrators. The National Development and Reform Commission (NDRC) and the State Administration for Market Regulation (SAMR) have established audit and oversight mechanisms for commodity price reporting activity that engages Chinese market participants and Chinese-origin data. Those mechanisms are not theoretical. They have been applied.

The compliance implications for a Western PRA publishing benchmarks for iron ore, thermal coal, copper, aluminium or any commodity where Chinese market participants are material contributors are significant and have not been adequately addressed in the compliance architectures most PRAs currently operate. The question of whether a Chinese steel mill's bid submitted to a London-based PRA constitutes data generated within China for the purposes of the DSL is not settled. The question of what audit rights the NDRC may assert over a PRA's China-origin data flows is not settled. The question of what cross-border data transfer obligations apply when assessment results are published globally is not settled.

What is settled is that these questions exist, that the regulatory trajectory is toward tighter enforcement rather than looser, and that the PRA which has not mapped its China exposure against the data sovereignty framework has not assessed its compliance position — it has simply not looked at it.

The firms that have operational experience of how an NDRC audit is structured, what it examines, how evidence is presented and what Western PRAs consistently underestimate about it are a small group. That knowledge is not widely distributed in the market, and it is not available in the annual IOSCO assurance opinion, which does not reach Chinese regulatory exposure at all. The compliance function that builds this understanding before it is required by a regulator will be positioned. The one that encounters it for the first time under examination will be managing a crisis rather than a compliance programme.

There is also a commercial dimension that the compliance analysis alone does not capture. China is the world's largest consumer of most base metals and thermal coal. The benchmarks that matter most for Chinese procurement, financing and derivative hedging are precisely the benchmarks most likely to attract Chinese regulatory attention. An administrator whose compliance architecture cannot demonstrate credible governance of its China-origin data is an administrator whose benchmarks may, over time, find their commercial position in Chinese markets eroding — not through regulatory prohibition but through the quiet preference of Chinese counterparties for price references whose governance they understand.

---

The annual opinion is reaching the limit of what periodic engagement can establish

The most structurally significant shift is also the most difficult to state plainly, because it implicates the instrument the market has relied on for over a decade. The annual IOSCO assurance opinion is a periodic engagement. It is designed to confirm, at a point in time, that the policies, processes and controls governing a PRA's benchmark administration are consistent with the IOSCO Principles. It does that well. The question is whether that is the right question.

The IODEX reading — IODEX being the Platts iron ore index, the world's most widely referenced seaborne iron ore benchmark — set out in the continuous compliance assurance framework published on this site demonstrates the point precisely. Through 2024 and 2025, the dominant iron ore brands supplied by BHP and Rio Tinto drifted below the 62 percent iron content anchor on which IODEX and its entire derivative complex are built. Read cycle by cycle, nothing failed. The methodology was applied faithfully. The normalisation machinery performed exactly as designed. A conformance assessment conducted at any point in that period would have returned compliant. But a reading of the system over time — tracking the relationship between the base specification and the physical market across cycles — would have identified the drift and its trajectory before it forced the structural correction that ultimately arrived: the migration from 62 to 61 percent iron and the introduction of a 61 percent equivalent to carry the derivative complex across.

This is not a criticism of Platts, whose operation is among the most transparent in the market, nor of the assurance providers who reviewed it. It is an observation about the structural limit of periodic engagement as a compliance instrument. A periodic review confirms the state of the system at the moment of review. It cannot establish the direction the system is travelling, the rate at which it is drifting, or the point at which a currently compliant position will become contingent on circumstances the operation does not control.

The compliance states that matter most — methodology defective while the operation masks it through analyst competence, operation compensating for a methodology gap through judgement the methodology does not authorise, system absorbing structural change without the adaptive response that would correct it — are precisely the states that do not appear in a single-cycle reading. They are visible only across cycles, in the comparison between what the system looked like twelve months ago and what it looks like today.

The direction the market is moving is toward continuous internal assurance as the primary instrument, with periodic external review functioning as a checkpoint within a continuous activity rather than the activity itself. This is not a displacement of the external opinion — it is a maturation of the compliance architecture around it. The external opinion becomes more credible, not less, when it reviews a system that has been continuously monitored rather than prepared for annual inspection. The auditor who walks into a continuous assurance environment produces better findings more efficiently. The compliance function that operates one produces a stronger evidence position and surfaces remediation before it becomes regulatory exposure.

The firms that build this architecture ahead of market expectation will find themselves in a different commercial and regulatory position from those that wait to be required. The annual opinion was always a floor, not a ceiling. The compliance functions that treated it as a ceiling are now facing a market that is beginning to ask what sits above it.

The compliance architecture that serves this market for the next decade will not look like the one that has served it for the last. The bifurcation is structural. The Chinese regulatory trajectory is directional. The limit of periodic engagement is observable in the public record. Each is already running. The question for every compliance function in this market is not whether these shifts will arrive, but which of them it is already positioned for.

The IOSCO Principles were written to protect the integrity of the price. That purpose does not change. What changes is the architecture required to meet it — in a market where statutory scope has concentrated, where Chinese regulatory authority over commodity data flows is being actively asserted, and where the most consequential compliance states are the ones a periodic engagement is structurally unable to see.

The compliance function that reads these shifts as administrative change has misread them. They are competitive and strategic. The administrators that build for the architecture these shifts require — differentiated by tier, configured for cross-jurisdictional exposure and capable of continuous rather than periodic assurance — will hold a compliance position that is genuinely defensible. The ones that do not will hold the appearance of one.

Karim Bihi · The Price Reporting Standard · June 2026

A price reporting agency that moves an assessment closer to the market it measures is doing its job. A price reporting agency that moves an assessment into Chinese territory is, by the same act, moving it under a regulatory regime most Western compliance functions have not assessed. These are not two decisions. They are one decision, read from two directions, and almost nobody in this market is reading it from the second.

The commodity benchmark market is localising. Assessments that once sat at arm's length from China — priced in dollars, published on a London or Singapore clock, delivered on a seaborne basis — are being progressively brought onshore. Publication times are moving to Chinese hours. Assessments are being denominated in yuan. Delivery bases are shifting to in-warehouse and ex-works China. Data submitters are being recruited inside the mainland. Each step is rational, defensible and in most cases explicitly requested by the market. Each step also moves the underlying price data closer to the definition of data generated and processed within Chinese territory — the trigger condition for a body of law that carries audit rights, cross-border transfer restrictions and enforcement powers most price reporting agencies have never modelled against their own operations.

This piece sets out the trend, names the regulatory trigger, and draws the paradox plainly. It is not an argument against localisation. Localisation is correct. It is an argument that the compliance consequence of localisation is not being read alongside the commercial benefit, and that the two have to be read together.

The market is moving onshore — for good reasons

The localisation of China-facing commodity assessments is visible across the public record of every major price reporting agency (PRA) with significant Chinese coverage. The pattern is consistent because the commercial logic is universal: China is the dominant consuming market for most base metals, steelmaking raw materials and battery materials, and an assessment that does not reflect the way the Chinese market actually transacts is an assessment that loses relevance.

Fastmarkets provides a clearly documented illustration. In 2026 it moved the publication of its iron ore 61% Fe fines FOT Qingdao indices from a Singapore timestamp to a Shanghai timestamp, explicitly to align with the Chinese pricing day. It publishes iron ore assessments denominated in yuan per wet tonne on an FOT Qingdao basis — a price formed inside a Chinese port, in Chinese currency, on a Chinese clock. It publishes a wide range of assessments on ex-works mainland China, in-warehouse China and FOB China bases. And in its lithium methodology consultations it openly invites Chinese market participants to become data submitters, recruiting the input data directly from inside the territory. None of this is unusual. It is what a serious PRA does when it is committed to measuring the Chinese market accurately, and Fastmarkets is among the more transparent and methodologically rigorous administrators in the sector. The point is not that any of these decisions is wrong. The point is what they amount to when read together.

What they amount to is an assessment whose inputs are sourced within China, whose price is formed on a Chinese delivery basis, whose currency is the yuan and whose publication is timed to the Chinese day. Read commercially, that is an assessment doing exactly what it should. Read against the data sovereignty framework, it is an assessment whose entire production chain now sits substantially within Chinese jurisdiction.

---

The regulatory trigger most compliance functions have not modelled

China's data sovereignty framework rests on three principal statutes. The Data Security Law (DSL), in force since September 2021, governs data processing activities and assigns obligations based on data classification and the territory in which processing occurs. The Personal Information Protection Law (PIPL), in force since November 2021, governs personal information and imposes strict conditions on its cross-border transfer. The Cybersecurity Law (CSL), in force since 2017, establishes data localisation and security review requirements for data generated within China. Around these sits the Counter-Espionage Law, amended in 2023 to broaden the definition of espionage to include the transfer of data relating to national security, with the scope of what constitutes national security left deliberately wide.

The operative concept across this framework is territory. The obligations attach to data generated or processed within the People's Republic. A price submission made by a Chinese steel mill, a Chinese trader or a Chinese refiner — captured by a PRA's reporter, recorded in the PRA's systems and used to construct a published assessment — is data generated within Chinese territory. When that submission is held, processed and then transferred out of China to a London or Singapore pricing operation for publication, it is, on a plain reading of the framework, a cross-border transfer of China-origin data.

The questions this raises are not settled, and that is precisely the problem. Whether a single anonymised price point constitutes regulated data under the DSL's classification regime is not settled. Whether the aggregate flow of Chinese transaction data to an overseas benchmark administrator crosses the threshold that triggers a security review is not settled. What audit rights the National Development and Reform Commission (NDRC) and the State Administration for Market Regulation (SAMR) may assert over a PRA's China-origin data flows is not settled. What is settled is that the framework applies to exactly the kind of data a localised assessment is built on, that the enforcement trajectory is tightening rather than loosening, and that a PRA which has localised its assessments without mapping them against this framework has increased its exposure without measuring it.

---

The paradox

Here is the structure of the problem stated plainly. The decisions that make a China-facing assessment more accurate, more relevant and more commercially valuable are the same decisions that increase its exposure under the data sovereignty framework. They are not in tension at the level of intent. They are the same act.

Move the publication time onshore to reflect the Chinese trading day, and the assessment is better — and more clearly tied to Chinese territory. Denominate in yuan to match how the market actually prices, and the assessment is better — and more clearly a domestic Chinese price. Recruit data submitters inside the mainland to deepen the input pool, and the assessment is better — and more clearly built on data generated within China. Shift to an in-warehouse China delivery basis to capture the portside market that now dominates Chinese iron ore trade, and the assessment is better — and more clearly a measurement of activity occurring inside the territory. Each improvement is a step deeper into the jurisdiction.

The compliance function and the commercial function are, in most PRAs, optimising the same decisions from opposite ends and never meeting in the middle. The commercial side sees market fidelity improving. The compliance side, if it is looking at all, is looking at IOSCO conformance — the annual assurance opinion against the IOSCO Principles for Price Reporting Agencies — which does not reach Chinese data sovereignty exposure at all. The IOSCO opinion was not built to ask whether a localised assessment has walked into the scope of the DSL. So the exposure accumulates in the space between two functions, each doing its job, neither reading the other's consequence.

This is the same structural blindness that runs through every argument on this site. Compliance is not a property of any single decision. It is the emergent state of how decisions interact. A localisation decision is commercially sound and regulatorily consequential at the same time, and a compliance architecture that reads only one dimension of it has not assessed the decision — it has assessed half of it.

---

What this requires

The remedy is not de-localisation. Pulling assessments back offshore to reduce data sovereignty exposure would degrade the very market fidelity that makes them valuable, and would itself be a methodology decision with its own IOSCO consequences. The remedy is to read the localisation decision in both dimensions before it is made, not after.

Concretely, that means a PRA with material Chinese coverage mapping its assessment portfolio against the data sovereignty framework the way it already maps it against IOSCO — identifying which assessments draw on China-origin data, which have localised to the point of plausibly sitting within the territorial scope of the DSL and PIPL, what the cross-border transfer position is for each, and what an NDRC or SAMR enquiry would actually examine if it arrived. That map does not exist in the annual assurance opinion. It is not produced by any current external assurance instrument. And it requires an understanding of how Chinese regulatory oversight of commodity price reporting actually operates — what it examines, how evidence is presented, what Western administrators consistently underestimate — that is held by very few people in this market.

The PRA that builds this map before it is required by a regulator holds a defensible position. The one that builds it during an enquiry is managing a crisis. The difference between the two is whether the compliance function read the localisation decision in both dimensions while it was still a choice, or only in one while the exposure quietly accumulated underneath an assessment that looked, by every IOSCO measure, entirely sound.

The market is localising because localisation is correct. The exposure is accumulating because the second dimension of a correct decision is not being read. A benchmark can be improving on every commercial and methodological measure and walking deeper into a regulatory regime nobody has mapped, through the very same decisions, at the very same time. That is the paradox, and it will not resolve itself.

Karim Bihi · The Price Reporting Standard · June 2026