The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have published a report on the feasibility of further centralisation in the reporting of major information and communication technology (ICT)-related incidents by financial entities (a single EU Hub), as mandated by Article 21 of the Digital Operational Resilience Act (DORA). The report explores the potential for centralisation in the reporting process and assesses three models: the baseline model, a model with enhanced data sharing arrangements, and a fully centralised model. It evaluates the potential burden, cost reductions, and the efficiency and effectiveness gains each model could bring to cross-sector supervisory practices.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have published templates, technical documents and tools for the dry run exercise on the reporting of registers of information in the context of the Digital Operation Resilience Act (DORA) announced in April 2024. Participating financial entities are expected to submit their registers of information to the ESAs through their competent authorities between 1 July and 30 August 2024.

The Joint Committee of the European Supervisory Authorities (ESAs), comprising of the European Banking Authority (EBA), the European Insurance and Occupational Pensions Authority (EIOPA), and the European Securities and Markets Authority (ESMA), has published an updated consolidated questions and answers document on the Sustainable Finance Disclosure Regulation (SFDR) (Regulation (EU) 2019/2088) and its Delegated Regulation (Commission Delegated Regulation (EU) 2022/1288). This updated document combines the European Commission’s interpretations of EU law with guidance from the ESAs on its practical implementation. It provides clarifications on key areas including the scope of application, definitions of sustainable investments, principal adverse impact disclosures, financial product and taxonomy-aligned investment disclosures, multi-option products, and the obligations of financial advisers and execution-only firms.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority (ESAs) have published guidance detailing how they will oversee critical Information and Communications Technology (ICT) third-party providers under the Digital Operational Resilience Act (DORA). The guidance outlines the framework for designating critical providers, conducting examinations through investigations and inspections, issuing recommendations and following up on implementation. It establishes a new joint oversight structure including the Joint Oversight Network and Oversight Forum to coordinate activities across the ESAs. The guidance aims to provide clarity to both supervisors and regulated entities on how DORA oversight will operate in practice.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have concluded a multilateral memorandum of understanding (MoU) to strengthen co-operation and information exchange with the European Union Agency for Cybersecurity (ENISA).

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) are to launch in May 2024 the voluntary exercise for the collection of the registers of information of contractual arrangements on the use of ICT third-party service providers by financial entities. Under the Digital Operation Resilience Act (DORA) and starting from 2025, financial entities will have to maintain registers of information regarding their use of ICT third-party providers.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have announced that they intend to establish the EU systemic cyber incident co-ordination framework (EU-SCICF), in the context of the Digital Operational Resilience Act (DORA). It will aim to facilitate an effective financial sector response to a cyber incident that poses a risk to financial stability, by strengthening the co-ordination among financial authorities and other relevant EU bodies, as well as with key actors at international level.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have updated their consolidated Q&As on the PRIIPs Key Information Document.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have updated the Q&As on the PRIIPs Key Information Document (KID), with a new question 13 in the general topics section.

The European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have updated their Q&As on the PRIIPs Key Information Document (KID), with new question in sections I, II, IIIA, V, VI, VII and XIIIF.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have update the Q&As on the Sustainable Finance Disclosure Regulation (SFDR) and the SFDR Delegated Regulation (Commission Delegated Regulation (EU) 2022/1288). The update concerns an amended answer to question V.1 (page 28) on financial product exposures.

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) have published a consolidated set of Q&As on the Sustainable Finance Disclosure Regulation (EU) 2019/2088 (SFDR) and the SFDR Delegated Regulation (Commission Delegated Regulation (EU) 2022/1288).