EU financial firms must prepare now for new rules on critical third-party arrangements
By 
Ruth Prickett2025-12-15T18:04:00
European banks and financial institutions must prepare now for stringent new rules on third-party suppliers. A consultation on plans to introduce a regime similar to the EU’s Digital Operational Resilience Act (DORA), but focusing on critical non-ICT third-party suppliers, closed in October, and guidelines will follow shortly.
Experts at global law firm Travers Smith wrote in a legal briefing in November that the plans build significantly on the European Banking Authority’s (EBA’s) existing rules from 2019 and “will lead to an overhaul of third-party risk management with EU financial services.”
Related articles
-
ArticleFormer Credit Suisse compliance officer charged with money laundering
A compliance officer is facing charges for laundering $7 million in a complex legal case in Switzerland. Swiss prosecutors have charged Credit Suisse, and one of its former employees, with failing to maintain adequate controls.
-
ArticleU.K. asset managers to focus on investor engagement outcomes under new reporting guidance
Asset managers reporting under the U.K.’s updated Stewardship Code starting Jan 1 should focus on engagement outcomes and evidence of impact. New guidance from the U.K. financial regulator offers case studies and checklists to support compliance.
-
ArticleNew regulatory regimes for U.K. and EU ESG ratings firms could increase compliance costs
Environmental ratings are becoming big business as companies seek proof of sustainable and socially beneficial conduct. Firms that issue ratings on environmental, social and governance (ESG) performance are set to be regulated in the EU and U.K.
More from Regulatory Policy
-
ArticleTrump tirade against DEI turns to proxy advisors and shareholder proposals
President Donald Trump has directed the Securities and Exchange Commission (SEC) to review—and remove—any SEC rules or guidance that allow proxy advisors to influence business practices related to diversity, equity and inclusion (DEI) and environmental, social and governance (ESG) policies.
-
ArticleTrump takes aim at state AI laws, promises federal action on AI legislation
President Donald Trump has issued an executive order aimed at dismantling the artificial intelligence (AI) laws of California, Colorado and three other states with comprehensive laws.
-
ArticleSFO sharpens framework for judging compliance programs in bribery and fraud cases
The U.K. Serious Fraud Office (SFO) has updated its guidance about how it evaluates corporate compliance programs when considering whether to prosecute or offer leniency to companies that have breached bribery and corruption laws.