Publications

EBA AML/CFT Newsletter Issue 13 covers updates on virtual IBANs risks, MiCAR governance guidelines for asset-referenced tokens, joint EBA-ESMA suitability assessments for crypto-asset issuers, translated ML/TF risk factors guidelines, and supervisory training on crypto-assets and risk assessment.

EBA peer review assessing implementation of the Guidelines on the application of the definition of default (EBA/GL/2016/07) across EU competent authorities, evaluating transposition, compliance, and supervisory practices under CRR framework.

EBA consults on draft Handbook outlining guidelines for appointing and assessing independent valuers in bank resolution, covering preparatory steps, independence criteria, conflict-of-interest safeguards, and contractual considerations under EU resolution frameworks.

European Banking Authority (EBA) report analysing structured deposits – covers definitions, market evolution, investor risks, disclosure requirements, and supervisory activities in the EU from January to September 2023, with proposed improvements for future reporting.

European Banking Authority (EBA) outlines the EU-SCICF, a framework for coordinating responses to systemic cyber incidents threatening financial stability, involving national and EU authorities to share information and align crisis measures.

EBA statement clarifying the application of CRR 3 for credit risk under the Internal Ratings Based (IRB) Approach, outlining implementation requirements, model landscape communication, and supervisory expectations for banks and authorities from January 2025.

EBA, EIOPA, and ESMA finalize technical standards under DORA for major incident and cyber threat reporting, defining content, templates, timelines, and procedures for financial entities, including streamlined templates and adjusted reporting deadlines.

EBA, EIOPA, and ESMA finalize regulatory technical standards under DORA to define criteria for composing joint examination teams, ensuring balanced participation of ESA and competent authority staff in ICT third-party service provider oversight.

European Supervisory Authorities finalize Regulatory Technical Standards under DORA to define criteria, requirements, and methodology for threat-led penetration testing (TLPT), including tester roles, testing phases, and supervisory cooperation, following public consultation feedback.

European Supervisory Authorities finalize Regulatory Technical Standards under DORA to harmonize oversight conditions for critical ICT third-party service providers, detailing information requirements, subcontracting arrangements, and assessment processes for competent authorities.

EBA, EIOPA, and ESMA joint guidelines under DORA for financial entities on estimating and reporting aggregated annual costs and losses from major ICT-related incidents, ensuring harmonization, proportionality, and reduced reporting burden.

EBA, EIOPA, and ESMA finalize joint guidelines under DORA to establish cooperation and information exchange procedures between European Supervisory Authorities and competent authorities for consistent oversight of critical ICT third-party service providers, effective January 2025.

EBA consults on draft amendments to Implementing Technical Standards for the joint decision process on internal model authorisations under CRR (Regulation (EU) No 575/2013), focusing on prudential permissions and stakeholder feedback by October 2024.

EBA report assessing the implementation of gender-neutral remuneration policies by banks and investment firms, analysing compliance challenges, supervisory reviews, pay gap monitoring, and measures to ensure equal pay under EU regulatory frameworks – July 2024.