On 18 September 2026 the European Banking Authority published EBA/GL/2026/09, its final guidelines on the sound management of third-party risk relating to non-ICT services. The EBA third-party risk guidelines widen the governed perimeter beyond outsourcing, which remains a subset, to non-ICT third-party arrangements within the Guidelines’ defined scope, with particular focus on arrangements supporting critical…
On 25 August 2026 the European Banking Authority opened a three-month consultation on the mechanics of investment firm reclassification into credit institutions. Meeting an Article 8a(1) threshold triggers an application for credit institution authorisation; it does not itself complete the reclassification, and Article 8a(2) CRD permits the undertaking to continue the relevant activities until authorisation…
The CSSF SREP 2025 supervisory disclosure, published on 29 June 2026, is a short spreadsheet that describes, in the regulator’s own words, how the CSSF runs the supervisory review and evaluation process (SREP) for Luxembourg investment firms. It carries no firm names and no individual scores. For a Class 2 investment firm it is still…
Open the wrong remuneration file in a Luxembourg fund house and you can lose a week building a return nobody asked for. The CSSF updated its User Guide for remuneration reporting page on 3 June 2026, and the title alone sends fund teams down the wrong road. CSSF remuneration reporting, as that guide defines it,…