Regulatory Watch
Official European supervisory-guidance analysis
EBA final non-ICT guidelines await an application date
The European Banking Authority published final third-party-risk guidelines for non-ICT services on September 18, 2026, but its authority page still marks them not yet applicable. EU financial firms can map affected critical or important arrangements now while retaining the applicable 2019 outsourcing baseline until the replacement takes effect.
Regulatory Watch
7 min read
7 min read