European Banking Authority (EBA) record of processing activity for financial transactions under EUDPR Article 31 – details data handling for payments, budget execution, and personal data categories of staff, contractors, and beneficiaries, including retention periods and security measures.
EBA discussion paper seeking stakeholder feedback on simplifying the credit risk framework under CRR, including proposals for the Standardised and IRB approaches, harmonisation of rules, and real estate exposure adjustments.
As DORA requires financial entities to pre-determine the frequency of audits and inspections on the basis of a risk-based approach, are financial entities not permitted to agree on a maximum audit frequency (e.g. once per year) with their ICT third-party service providers?