Regulatory News

EBA drives forward prudential and operational reforms for banks in EU

The banking sector in European Union (EU) is undergoing intense regulatory activity, with an emphasis on refining and strengthening the Capital Requirements Regulation (CRR) framework. A series of key announcements from the European Banking Authority (EBA) in the recent weeks reveal a strategic trend: a meticulous calibration of existing rules to enhance robustness and ensure proportionate application, all while preparing for the full impact of the Basel III reforms. The announcements indicate a comprehensive regulatory agenda, touching on critical facets of bank capital, risk management, reporting, and supervisory governance—areas where strategic technological adoption is proving indispensable.

Fine-tuning requirements for capital adequacy and resilience

  • Own funds and eligible liabilities: The EBA initiated a consultation to amend its technical standards on own funds and eligible liabilities. The key proposed amendment is to shorten the timeframe for competent and resolution authorities to process applications for reducing own funds and eligible liabilities instruments from four to three months. While aiming for greater flexibility, this adjustment places increased pressure on banks to ensure their capital planning processes are agile and error-free. The consultation period closes on October 09, 2025.

  • Credit conversion factors and definition of default: The EBA initiated consultations on two guidelines under the CRR framework: one on the methodology to estimate and apply credit conversion factors and the other on revisions to the application of the definition of default. The guidelines on definition of default propose to maintain the 1% net present value loss threshold for debt restructuring and extend the exceptional treatment of days past due for non-recourse factoring arrangements from 30 to 90 days. Implementation of such requirements demands sophisticated analytical capabilities and robust data management to ensure accurate and consistent credit risk assessment, particularly for banks leveraging the internal ratings-based (IRB) approach. Calculation accuracy and transparent application of these factors are paramount for regulatory compliance. Both consultations close on October 15, 2025.

  • Acquisition, Development and Construction (ADC) exposures: The EBA published the final guidelines on the treatment of ADC exposures to residential property for the standardized approach for credit risk under CRR. These guidelines specify conditions for applying a reduced risk-weight (100% instead of 150%) and include revisions like lowering the obligor-contributed equity threshold. While offering greater proportionality, banks must have clear, auditable processes to identify eligible exposures and apply the correct risk-weights, ensuring compliance with the nuanced conditions. The guidelines will apply two months after their publication in all official languages of EU.

  • Operational risk capital requirements: The EBA published three final draft technical standards on operational risk capital requirements and related supervisory reporting under CRR. These include the regulatory technical standards on the calculation and adjustment of Business Indicators (BI), the implementing standards on the mapping to FINREP, and the implementing standards on operational risk reporting. Implementing these new operational risk standards requires significant adaptations to data collection, calculation engines, and reporting infrastructures. The upcoming technical package (data point model, validation rules, taxonomy) will necessitate further system readiness. The EBA will publish a technical package in Q4 2025, with the first applicable reference date for reporting being March 31, 2026.

  • Guidelines on ancillary services undertakings: The EBA propose draft guidelines for ancillary services undertakings (ASU) to provide clear criteria for identifying ASU activities under CRR. Ensuring consistent application of prudential consolidation for banking groups requires a precise and automated identification process for ASU activities to avoid misclassification and potential non-compliance. The consultation closes on October 07, 2025.

Streamlining reporting and data consistency

  • Reporting framework hotfix and format postponement: The EBA released a hotfix for reporting framework 4.1 to address technical issues and ensure reporting accuracy. It postponed the obligation to use the xBRL-CSV reporting format for Reporting Framework 4.2 to March 2026. While providing a temporary reprieve, these changes highlight the constant need for adaptable reporting solutions that can quickly integrate hotfixes and transition to new formats like xBRL-CSV, without disrupting operations.

  • Harmonized NACE classification implementation: The EBA, in collaboration with the European Central Bank (ECB), endorsed advice for harmonized implementation of the revised statistical classification of economic activities, NACE Rev. 2.1, across EU reporting frameworks. Banks need to ensure their internal data systems and reporting tools can accurately map and apply the updated NACE classification across diverse reporting requirements. Advice was issued June 30, 2025, with implementation for reporting from January 01, 2026.

Strengthening supervisory governance

  • Acquisitions in credit institutions: The EBA launched a consultation on the draft regulatory technical standards specifying the minimum information required for notifications of proposed acquisitions of qualifying holdings in credit institutions. These standards aim to standardize the content of such notifications across the EU, thus supporting a consistent prudential assessment by national competent authorities and mitigating risks associated with ownership changes. The consultation closes on September 18, 2025.

  • Third-party risk management for non-ICT services: The EBA proposed revisions to the guidelines on sound management of third-party risk, specifically focusing on non Information and Communication Technology (ICT) related services, aligning them with the Digital Operational Resilience Act (DORA) principles. Managing risks across the entire lifecycle of third-party arrangements, particularly for critical non-ICT functions, necessitates comprehensive, auditable processes and potentially integrated registers with DORA's ICT register. This requires a strong framework for risk assessment, due diligence, and ongoing monitoring of outsourced services. The consultation runs until October 08, 2025.

Strategic implications and the role of RegTech in Basel 3 era

The current regulatory landscape, shaped by CRR3 and the continuous stream of EBA updates, highlights a critical juncture for European banks. This is not merely about incremental compliance; it's about a strategic imperative for operational and technological transformation to fully meet the demands of the Basel III endgame. The meticulous detail of these new regulations — from complex capital calculations to enhanced risk frameworks and granular reporting — renders manual processes and disparate legacy systems increasingly inadequate. Financial institutions are discovering that achieving true compliance, coupled with operational efficiency, inherently requires sophisticated digital solutions. This is precisely where advanced regulatory technology (RegTech) capabilities prove indispensable. Such solutions empower banks to:

  • Automate capital and reporting: RegTech streamlines the precise calculation of capital requirements and automates regulatory report generation, adapting dynamically to evolving taxonomies and formats.

  • Enhance data quality and governance: These platforms provide robust data validation, aggregation, and lineage tracking, ensuring the high-quality, granular data necessary for accurate risk measurement and comprehensive regulatory submissions.

  • Strengthen risk management: RegTech tools offer integrated views and automated monitoring, enabling banks to proactively manage risks across credit, operational, and third-party exposures.

The EBA's calibrated approach provides a clear roadmap; for banks, the successful navigation of this path hinges on embracing intelligent automation and robust data governance. By strategically adopting and integrating these technological advancements, financial institutions can confidently transform compliance challenges into a strategic advantage, building a more resilient, efficient, and future-ready banking enterprise.

 

Related links


LEARN MORE

Innovating with purpose

Moody’s is incorporating cutting-edge technologies, such as artificial intelligence, to help banks meet their existing challenges more effectively.