EBA Training Plan 2025 outlines scheduled workshops and courses for EU supervisors covering AML/CFT, MiCAR, DORA, ESG risks, crypto assets, IRRBB, FRTB, and supervisory reporting to enhance regulatory compliance and best practices.
According to Article 2 par 1 of DORA AIFM is in scope of DORA, AIF is not defined as financial entity. There are situations when agreement is concluded directly between AIF and ICT service provider. It is obvious that the agreement in such situation should contain elements listed in Article 30 of DORA and the risk assessment should be performed by AIFM. But shall such agreement also be:
- included in the register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers according to Article 28 par 3 and
- notified to competent authority in a timely manner prior of the conclusion of the agreement if the agreement supports critical or important functions?
The regulation applies to managers of alternative investment funds according to Article 2, point (k) of DORA. According to Article 3, (point 44), of DORA a manager of alternative investment funds is defined as “a manager of alternative investment funds as defined in Article 4(1), point (b), of Directive 2011/61/EU”.
According to Article 4(1), point (b), of Directive 2011/61/EU (AIFM Directive) “AIFMs’ means legal persons whose regular business is managing one or more AIFs”. We are of the understanding that Article 4(1), point (b), does not exclude non-EU AIFM. EU AIFM and non-EU AIFM are defined in Article 4(1), point (L) and point (ab). Since DORA only refers to article 4(1), point (b), of the AIFM Directive and not to article 4(1), point (L), we are wondering if DORA applies to both EU and non-EU AIFM as the definition implies.
Do the requirements of the Digital Operational Resilience Act (DORA) apply to Virtual Asset Service Providers (VASPs) that are not classified as Crypto-Asset Service Providers (CASPs) under the Markets in Crypto-Assets Regulation (MiCAR) as of December 30, 2024 and are benefiting from the MiCAR transition period?"
When restoring backup data using own systems, financial entities shall use ICT systems that are physically and logically segregated from the source ICT system. What does DORA mean by "recovering backed-up data using own systems"? What does "own systems" mean? What is the source ICT system? The productive system whose data is backed-up or the system where the backed-up data is stored?
The European Banking Authority (EBA) today launched a consultation on its Guidelines on supervisory independence of competent authorities under the Capital Requirements Directive (CRD). Risks to supervisory independence pose challenges to the soundness of supervision and good governance and new requirements in the CRD introduce measures to manage them. These Guidelines further clarify the arrangements that competent authorities should have in place to prevent and manage conflicts of interest. The consultation runs until 23 January 2026.
EBA consults on draft Guidelines to strengthen supervisory independence of competent authorities under Directive 2013/36/EU (CRD IV), addressing governance, accountability, and operational autonomy by 23 January 2026.
As an active member of the Network for Greening the Financial System (NGFS), the European Banking Authority (EBA) is proud to announce the release of the NGFS Declaration on the Economic Cost of Climate Inaction on the occasion of the 2025 United Nations Climate Change Conference (COP30) in Belém, Brazil. The declaration underscores the mounting macroeconomic and financial risks of delayed climate action and reaffirms the NGFS’s commitment to supporting a well-managed transition to a low-carbon economy.
EBA 2025 Amending Budget No. 1 – details adjustments to revenue and expenditure for 2025, including contributions from EU national authorities, EU funding, fees under DORA, and staff-related costs under Regulation (EU) No 1093/2010.
European Banking Authority 2025 staffing plan – details authorized posts, temporary and contract staff allocations, and workforce distribution across AD, AST, and external personnel for regulations including MiCAR, DORA, SDFA, and EMIR.
The European Banking Authority (EBA) today launched a data collection, through the competent authorities, to obtain the list of EU counterparties that will be required to apply to the EBA for validation of ISDA SIMM, as well as their contact persons. The EBA underscores the counterparties' obligation to apply for the authorisation of the use of initial margin models and warns of the legal consequences in case of non-authorised use under the European Market Infrastructure Regulation (EMIR).
EBA Board of Supervisors conference call minutes from September 2025 covering AI Act implementation, ESRB systemic risk discussions, EU financial sector preparedness, AMLA collaboration, 2026 work programme approval, and supervisory framework efficiency initiatives.