THIRD PARTYCURRENT
News topic

Regulatory Watch

Current reporting and analysis with clear distinctions between primary-source facts, provider-reported claims, and Third Party Current interpretation.

Official European supervisory-guidance analysis

EBA final non-ICT guidelines await an application date

The European Banking Authority published final third-party-risk guidelines for non-ICT services on September 18, 2026, but its authority page still marks them not yet applicable. EU financial firms can map affected critical or important arrangements now while retaining the applicable 2019 outsourcing baseline until the replacement takes effect.

Market context

Coverage is attached to the companies, capabilities, and standards it affects so that market records change with evidence rather than headlines alone.