European Banking Authority (EBA) data protection notice outlining personal data processing for its Young Talents Policy Traineeship Programme under EUDPR, covering selection, onboarding, and exit procedures, including data access, retention periods, and legal basis.
European Banking Authority (EBA) policy outlining guidelines for its young talents programmes, including the Students Programme, Job Shadowing Internship, and Traineeship Policy, effective October 2025, consolidating and updating previous internship frameworks.
EBA 2025 list of EU/EEA financial conglomerates under Directive 2002/87/EC (FICOD), including group names, coordinators, and competent authorities responsible for supplementary supervision as of October 2025.
The European Banking Authority (EBA) launched today a public consultation on its Discussion Paper on the simplification and assessment of the credit risk framework. The Paper sets out preliminary ideas to enhance the usability, efficiency and simplicity of the credit risk framework, aiming to stimulate a broader discussion on how to better structure the EBA’s future work in this area. Based on the comments received, the EBA will assess potential simplifications as part of its future policy work. The consultation runs until 10 May 2026.
EBA public hearing on 4 February 2026 discussing regulatory (RTS) and implementing technical standards (ITS) for prudentially material operations under the Capital Requirements Directive (CRD), focusing on cooperation and consultation processes.
European Banking Authority (EBA) record of processing activity for financial transactions under EUDPR Article 31 – details data handling for payments, budget execution, and personal data categories of staff, contractors, and beneficiaries, including retention periods and security measures.
EBA discussion paper seeking stakeholder feedback on simplifying the credit risk framework under CRR, including proposals for the Standardised and IRB approaches, harmonisation of rules, and real estate exposure adjustments.
As DORA requires financial entities to pre-determine the frequency of audits and inspections on the basis of a risk-based approach, are financial entities not permitted to agree on a maximum audit frequency (e.g. once per year) with their ICT third-party service providers?