EBA publishes final Guidelines on third-party risk management aligned with DORA
The EBA has published its final Guidelines on the sound management of third-party risk, covering both ICT and non-ICT arrangements and focusing on those supporting critical or important functions. The Guidelines introduce a two-year transitional period and align the EBA framework with DORA and the BCBS Principles for the Sound Management of Third-Party Risk. They apply across the full lifecycle of third-party arrangements, from due diligence and contracting to exit strategies.
Related updates
EBA E-mail Alert 16 July 2026: Key Regulatory Updates
The European Banking Authority (EBA) issued its e-mail alert on 16 July 2026, summarizing recent regulatory developments. The alert covers new guidelines, consultations, and other updates relevant to compliance officers in the financial sector.
16 Jul 2026
European Parliament confirms Thomas Gstädtner as EBA Executive Director
The European Parliament has confirmed Thomas Gstädtner as the new Executive Director of the European Banking Authority (EBA) following a plenary vote. He was selected by the EBA Board of Supervisors through an open selection procedure and will serve a five-year renewable term, taking up his duties in the coming weeks. The Executive Director is responsible for the day-to-day management and operations of the Authority.
16 Sep 2026
EBA Publishes Updated Validation Rules in Quarterly Reporting Framework Update
On 14 September 2026, the EBA published an updated list of validation rules under its regular quarterly review of supervisory reporting frameworks, identifying rules that have been deactivated due to inaccuracies or IT-related issues and rules that have been reactivated. The package also includes a micro taxonomy package and DPM validation rules update scripts, required from release 4.0 onwards. Competent authorities are reminded that data submitted under the ITS and Guidelines should not be formally validated against deactivated rules.
14 Sep 2026