On 9 July 2026 the European Banking Authority published the final technical package for version 4.3 of its supervisory reporting framework, and with it two build deadlines that reporting teams can no longer treat as roadmap items. The EBA reporting framework 4.3 package carries the standard specifications for two separate obligations: supervisory reporting by third-country…
On 9 July 2026, CSIRT KNF, the cyber-incident response team inside Poland’s Financial Supervision Authority, refreshed its report on the cyber threats facing the Polish financial sector for 2026. The document reads like a briefing pack rather than a rulebook: the priority attack scenarios, the techniques criminals are stacking into single campaigns, and the risks…
On 9 July 2026, the Financial Stability Board put bank, financial-market-infrastructure and insurance resolution experts in the same room and told them to stop planning in parallel. The occasion was the FSB’s ReSolve event for its Cross-Border Crisis Management working groups, and the framing came from FSB Secretary General John Schindler: the financial system is…
On 8 July 2026 the European Securities and Markets Authority published its final report on the technical standards that flesh out how EU central counterparties must build their CCP admission criteria (ESMA91-1505572268-4692). The standards sit under Article 37(7) of EMIR, the participation-requirements article that Regulation (EU) 2024/2987, better known as EMIR 3, rewrote when it…
On 8 July 2026 the European Securities and Markets Authority launched a Common Supervisory Action on crypto-asset service providers, aimed squarely at one activity: custody. The exercise assesses the maturity of CASP digital operational resilience frameworks for custody services, and national competent authorities will run it on a risk-based sample of authorised CASPs from the…
On 6 July 2026, the European Securities and Markets Authority (ESMA) published the first stage of its effectiveness assessment of the EMIR Active Account Requirement, together with the first annual report of the Joint Monitoring Mechanism. The rule applies to financial and non-financial EU counterparties that are subject to the EMIR clearing obligation and meet…
On 7 July 2026, the Chair of the ECB Supervisory Board, Claudia Buch, wrote to the CEO of every significant institution under a letter numbered SSM-2026-0301 and titled “Addressing AI-enabled cybersecurity threats”. The ECB AI cybersecurity letter does one operationally concrete thing behind its strategic language: it gives each directly supervised bank until 31 October…
A non-EU bank that wants to keep taking deposits, lending, or issuing guarantees in an EU Member State through a branch now has a hard date to work toward: 11 January 2027. On 7 July 2026 the European Banking Authority published its final Guidelines on the authorisation of third-country branches (EBA/GL/2026/08), and they settle the…
On 6 July 2026 the European Securities and Markets Authority (ESMA) selected Etrading Software (Netherlands) B.V. to run the EU’s OTC derivatives consolidated tape, naming it the consolidated tape provider for over-the-counter derivatives under the Markets in Financial Instruments Regulation (MiFIR). It is the third and last asset class under Article 27da of MiFIR to…
On 1 July 2026 the three European Supervisory Authorities each opened a consultation on rewriting the Key Performance Indicators that firms disclose under Article 8 of the EU Taxonomy Regulation. ESMA published a Consultation Paper, the European Banking Authority a Discussion Paper, and EIOPA a consultation on the insurance side. All three close on 12…