ESMA Private Credit Ratings Call for Evidence: What CRA-Regulated Firms Should Watch

ByOfficer

Last updated: April 2026

If your firm issues credit ratings that sit somewhere between fully public and strictly private, ESMA just put you on notice. On 16 April 2026, ESMA published a call for evidence (ESMA00-666616337-488) targeting restricted subscription and private credit ratings. The response deadline is 31 May 2026. That gives affected firms six weeks to assess their exposure, review internal classification of rating products, and decide whether to respond.

This is not a consultation paper proposing new rules. It is a fact-finding exercise. But the questions ESMA is asking signal where supervisory attention is heading. Firms in the CRA reporting chain, whether they produce, distribute, or use these ratings, should treat this as an early warning rather than a routine publication.

Related reading: ESMA/EBA Suitability Assessment Guidelines

Why ESMA Is Looking at This Now

The CRA Regulation (Regulation (EC) No 1060/2009) applies to credit ratings that are “disclosed publicly or distributed by subscription.” Private credit ratings, produced on individual order and shared with up to 150 persons on a confidential basis, sit outside the full scope of CRA supervisory requirements. That boundary used to be relatively clear.

It is not clear anymore. ESMA’s call for evidence acknowledges that rating products have emerged that do not fit neatly into either the public or private category. Restricted subscription credit ratings are the prime example. These are ratings issued by registered CRAs, distributed selectively to a limited group of subscribers who have an economic interest in the rated entity or instrument, and not made available to the broader market.

The problem for regulators is straightforward: these products look and function like credit ratings in terms of their analytical content and market impact, but they may not trigger the same governance, disclosure, and supervisory obligations as publicly distributed ratings. ESMA wants to know whether the current framework handles this adequately or whether the rules need updating.

I have seen this pattern before with other regulatory gaps. The product evolves faster than the rulebook. By the time the regulator launches a fact-finding exercise, the internal view is usually already forming. Firms that respond substantively to the call for evidence have a better chance of shaping whatever comes next. Firms that ignore it tend to be surprised by the outcome.

ESMA’s Working Definitions: Where Classification Gets Tricky

The call for evidence introduces working definitions that CRA-regulated firms should read carefully, because they may not match how your firm currently classifies its own products.

ESMA’s formal working definition of restricted subscription credit ratings (Section 3 of the paper) lists four criteria: (i) issued by a credit rating agency registered or certified under the CRA Regulation, (ii) distributed on a selective basis to a limited number of subscribers, (iii) used for regulatory purposes, and (iv) subject to contractual or technical restrictions on onward disclosure.

Elsewhere in the paper (paragraph 5), ESMA adds two further descriptive characteristics: these ratings are provided exclusively to subscribers with an economic interest in the rated entity, instrument, or exposure, and are not disseminated to the broader market or public. The “economic interest” criterion is where subscriber selection and access controls come into scope.

Private credit ratings, by contrast, are produced on individual order, provided exclusively to the person who placed the order, and not intended for public disclosure or distribution by subscription. The recipient can share with up to 150 persons, but strictly on a confidential basis.

The real problem starts when a rating product meets some criteria from each category. If a CRA produces a rating for a specific client but then makes it available to a defined subscriber group, is that a private rating or a restricted subscription rating? The answer matters because the CRA Regulation’s scope and disclosure obligations depend on it. Many firms have rating products that were designed as private but have drifted toward restricted subscription distribution in practice. ESMA is asking about exactly this grey zone.

What Teams Commonly Get Wrong Here

The most frequent classification error I see is treating the 150-person sharing limit as a safe harbour. The CRA Regulation’s private rating exemption is not just about the number of recipients. It requires that the rating was produced on individual order and was not intended for distribution by subscription. If a firm routinely produces “private” ratings that are then circulated to a subscriber list, even a small one, the product may actually fall within the CRA Regulation’s scope regardless of headcount.

What ESMA Is Asking: The Questions That Matter Most

The call for evidence contains two sets of questions. One set covers restricted subscription credit ratings (Q.1 through Q.8). The other covers private credit ratings (Q.9 through Q.16). Several questions deserve close attention from compliance and product teams.

Questions on Restricted Subscription Ratings

Q.1 asks about the main purposes and market needs these ratings serve, and when they are preferred over public ratings. This is ESMA probing whether there is a legitimate, distinct use case or whether restricted subscription is simply a way to avoid full regulatory obligations while delivering substantially the same product.

Q.4 is where the operational exposure sits. ESMA asks about the analytical processes, governance arrangements, and internal controls applied to restricted subscription ratings, and how they compare to those applied to public ratings. If your firm applies lighter governance to restricted products, this question is asking you to justify that difference. If you apply the same governance, ESMA wants to know why the distribution model differs.

Q.5 targets risks: information asymmetry, cherry-picking, market signalling, and procyclicality. These are the exact concerns that would justify tighter regulation. Firms should expect that whatever evidence ESMA collects here will form the basis of any future regulatory proposal.

Q.7 asks whether issuers seek restricted subscription ratings from multiple CRAs for the same exposure. If the answer is yes and common, that strongly suggests these products function as substitutes for public ratings, which strengthens the case for extending CRA Regulation requirements.

Questions on Private Credit Ratings

Q.10 is the key question for firms using private credit ratings in investment decisions, credit risk assessments, or internal capital allocation. ESMA is exploring whether private ratings have become de facto market infrastructure for private credit markets. If they have, the argument for regulatory coverage becomes much stronger.

Q.12 asks how private credit ratings differ from publicly disseminated regulated ratings in terms of governance, independence, conflicts of interest, internal controls, and methodologies. This is not a neutral question. ESMA is building a picture of whether lower-governance products are being used for the same purposes as fully regulated ratings.

Q.15 directly asks whether the current regulatory framework adequately supports the market need for external credit risk assessments in private markets. This is an open invitation: firms can argue the framework is adequate, or argue specific areas need improvement. Either response shapes where ESMA focuses next.

Who Should Care About This Call for Evidence

The paper is addressed to all financial market participants, but ESMA names four groups specifically: credit rating agencies, issuers, investors, and competent authorities.

For CRAs, the implications are direct. If you produce restricted subscription or private ratings, your product classification, governance framework, and distribution controls are all in scope. You should assess whether your current product taxonomy aligns with ESMA’s working definitions. Mismatches create supervisory risk.

For issuers that commission private or restricted subscription ratings, the question is whether the ratings you are paying for might be reclassified as falling within the CRA Regulation’s full scope. That could change the disclosure obligations attached to those ratings and affect how you use them in investor communications or regulatory filings.

For investors and asset managers, particularly those active in private credit, the call for evidence signals that the regulatory treatment of the ratings they rely on for credit assessment may change. If you use restricted subscription ratings as part of your ICAAP and ILAAP processes or credit risk frameworks, you should track this development.

For Luxembourg-based firms, the direct supervisory angle sits with ESMA, which is the exclusive EU supervisor of registered and certified CRAs under Articles 21 to 23e of the CRA Regulation. The CSSF is not the supervisor of CRAs. Any clarification or amendment to the CRA Regulation would flow through to how Luxembourg-supervised banks, investment firms, and fund managers use these ratings in their own regulatory and risk frameworks – including the ECAI framework under CRR, internal credit assessment under AIFMD, and inputs to ICAAP/ILAAP.

The Private Credit Growth Angle

ESMA does not publish a call for evidence without a reason. The growth of private credit markets across Europe is part of the context here. As more lending moves outside the traditional banking channel, the demand for credit assessments of private exposures has increased. Private and restricted subscription credit ratings have grown alongside that shift.

This is where teams usually misclassify the regulatory risk. The assumption is that because a rating is not public, it sits outside the CRA Regulation. That assumption works only if the rating meets the strict definition of a private credit rating under Article 2 of the Regulation. The moment a rating is distributed by subscription, even to a limited group, it falls within scope. Many firms producing ratings for private credit transactions have not fully tested whether their distribution model crosses that line.

ESMA’s call for evidence is, in part, an admission that the boundary is unclear and the regulator needs better data before deciding how to act. But the direction of travel is visible: more oversight of rating products used in private markets, not less.

Operational Steps Before 31 May 2026

If your firm touches restricted subscription or private credit ratings in any capacity, here is what to do before the deadline.

For Credit Rating Agencies

First, audit your product catalogue against ESMA’s working definitions. Map each rating product to one of three categories: public, restricted subscription, or private. Flag any product that does not fit cleanly. These are your highest-risk items.

Second, review the governance and internal controls applied to each product category. ESMA is asking whether the analytical standards differ between public and non-public ratings. If they do, document the rationale. If they do not, be ready to explain why the distribution model is more restrictive than the governance model requires.

Third, decide whether to respond. A substantive response gives you input into the regulatory process. Silence does not.

For Firms Using These Ratings

If you use restricted subscription or private credit ratings as inputs to your risk management, regulatory capital, or investment decision frameworks, you should assess the downstream impact of potential reclassification. What happens if a rating you currently treat as outside the CRA Regulation’s scope is brought inside it? Does that change how you can use it? Does it affect how the rating can be used under CRR (the ECAI framework), Solvency II (the standard formula), or your internal ICAAP/ILAAP credit risk methodologies?

For firms in the AIFMD space or managing credit fund strategies, the reliance on private ratings for portfolio-level credit assessment is common. Track this call for evidence alongside your broader regulatory change management process.

What This Does Not Mean

A call for evidence is not a consultation paper. ESMA is not proposing rules, amendments, or guidelines. There are no draft texts to review and no implementation timelines to plan for. The next step is that ESMA will review responses in Q2 2026 and then decide whether to pursue regulatory adjustments or clarifications.

Common advice on this type of publication is too broad when it says “prepare for new requirements.” There are no new requirements. The risk is different: ESMA may clarify that existing requirements already apply to products that some firms currently treat as out of scope. That is not a new rule. It is a supervisory interpretation that could hit immediately, without a transition period.

This distinction matters for compliance planning. If ESMA concludes that restricted subscription ratings already fall within the CRA Regulation’s scope under the existing text, affected firms would not get a phase-in period. They would be expected to comply now.

Frequently Asked Questions

What is the deadline for responding to ESMA’s call for evidence on private credit ratings?

31 May 2026. ESMA will review responses in Q2 2026.

What is a restricted subscription credit rating under ESMA’s working definition?

A credit rating issued by a CRA, distributed selectively to a limited number of subscribers with an economic interest in the rated entity or instrument, used for regulatory purposes, and not made available to the broader market or public.

How does a restricted subscription rating differ from a private credit rating?

A private credit rating is produced on individual order, provided exclusively to the person who placed the order, and can be shared with up to 150 persons on a confidential basis. A restricted subscription rating is distributed to a subscriber group, which may be broader, and is used for regulatory purposes.

Does the CRA Regulation currently cover restricted subscription ratings?

The CRA Regulation applies to credit ratings “disclosed publicly or distributed by subscription.” Restricted subscription ratings that are distributed by subscription likely fall within scope. ESMA’s call for evidence is partly about clarifying how this boundary applies in practice.

Will this call for evidence lead to new regulation?

Not directly. A call for evidence is a fact-finding exercise. ESMA may follow it with a consultation paper proposing regulatory adjustments, or it may conclude that the existing framework is adequate. The outcome depends on the evidence received.

Who should respond to this call for evidence?

ESMA specifically addresses it to credit rating agencies, issuers, investors, and competent authorities. Any firm that produces, commissions, distributes, or relies on restricted subscription or private credit ratings has a reason to respond.

What is the reference document number?

ESMA00-666616337-488, published 16 April 2026.

Does this affect Luxembourg-based firms specifically?

Yes. ESMA is the exclusive EU supervisor of registered and certified CRAs, and any clarification or amendment to the CRA Regulation would apply across all EU member states. For Luxembourg-supervised banks, investment firms, and fund managers, the practical impact is indirect but real: it could change how these ratings can be used in CRR, AIFMD, and ICAAP/ILAAP-related frameworks.

Related Articles

Key Takeaways

  • ESMA’s call for evidence (ESMA00-666616337-488) targets restricted subscription and private credit ratings. Response deadline: 31 May 2026.
  • Restricted subscription ratings sit in a grey zone between public and private. ESMA’s working definitions may not match how your firm classifies its products.
  • The CRA Regulation already covers ratings “distributed by subscription.” Restricted subscription ratings may already be in scope. A supervisory clarification could apply immediately without a transition period.
  • ESMA’s questions on governance, internal controls, and analytical processes signal concern that non-public ratings may receive lighter oversight than their market impact warrants.
  • CRAs should audit their product catalogue against ESMA’s working definitions and flag any product that does not classify cleanly.
  • Firms using private or restricted subscription ratings for credit risk, regulatory capital, or investment decisions should assess the downstream impact of potential reclassification.
  • Private credit market growth is driving the increase in these products. ESMA’s direction of travel points toward more oversight, not less.
  • Responding to the call for evidence is the most direct way to influence the regulatory outcome. The deadline is tight: six weeks from publication.

Sources and References

Disclaimer: The information on RegReportingDesk.com is for educational and informational purposes only. It does not constitute legal, regulatory, tax, or compliance advice. Always consult your compliance officer, legal counsel, or the relevant supervisory authority for guidance specific to your institution.

Similar Posts