Nos derniers articles

Cet article présente l'avis officiel de l'EBA concernant les modifications apportées par la Commission européenne aux normes techniques sur le risque opérationnel. L'EBA s'oppose fermement à la possibilité de combiner deux méthodes de calcul distinctes, craignant que cette flexibilité n'encourage l'arbitrage réglementaire et ne complique excessivement la surveillance.

Le document EBA/CP/2026/07 du 10 avril 2026 réforme le reporting des pertes de risque opérationnel sous CRR3, en application de l'Article 317 du CRR.
Changement clé : passage d'un reporting agrégé à un reporting granulaire événement par événement via l'approche "Open Table". L'ancien COREP C 17.01/17.02 est abrogé et remplacé par un modèle unique C 17.01 semestriel.
Nouvelle taxonomie EBA/RTS/2025/03 : 7 types d'événements de Niveau 1, 26 catégories détaillées de Niveau 2, et 15 attributs. Ces attributs capturent les risques émergents ESG et DORA sans multiplier les catégories.
Calendrier : 2026, capture interne selon la nouvelle taxonomie. Mi-2026 à mi-2027, période transitoire avec reporting limité au Niveau 1. 30 septembre 2027, application des nouveaux ITS. 31 décembre 2027, premier reporting granulaire incluant un rattrapage rétroactif depuis 2026.
Proportionnalité : Seuils des articles 316 et 319 maintenus. Reporting volontaire possible pour SNCI et banques moyennes.
Historique : Collecte one-off fin 2027. Look-back 10 ans pour Niveau 1, 1 an minimum pour Niveau 2 et attributs.

L'EBA privilégie l'approche granulaire pour simplifier les retraitements et harmoniser le reporting européen.

The European Commission’s AI Continent Action Plan emphasizes the need to significantly expand cloud and data center capacity across the EU to support AI and digital infrastructure goals. The Cloud and AI Development Act aims to incentivize investment and triple current capacity within seven years. The insurance sector supports this approach but warns against restrictive sovereignty measures that could exclude non-EU providers without viable alternatives. It advocates for flexible, risk-based cloud definitions and support for hybrid strategies. The sector stresses that capacity-building, not protectionism, is key to achieving digital sovereignty while maintaining innovation, competitiveness, and international interoperability.

Insurance Europe advocates for simplifying EU digital regulations, including the Cybersecurity Act and upcoming digital omnibus initiatives, to alleviate compliance burdens. The organization seeks to reduce overlaps and duplications in cybersecurity reporting, particularly under DORA, GDPR, and other horizontal legislations. They propose aligning cyber reporting mechanisms and centralizing notifications to multiple national agencies. Additionally, Insurance Europe supports stakeholder involvement in cybersecurity certification development, emphasizing that certification should remain voluntary. Concerns have been raised regarding the European Cybersecurity Certification Scheme for Cloud Services (EUCS), specifically regarding a lack of transparency and the inclusion of sovereignty requirements that could limit service provider choice and increase costs for insurers.

The EBA launched a consultation on four draft Regulatory Technical Standards for the EU's new AML/CFT regime, running until June 6, 2025. The RTSs cover AMLA's supervision criteria, ML/TF risk assessment methodology, customer due diligence requirements, and sanctions/administrative measures. These standards aim to harmonize and strengthen AML/CFT compliance across the EU.

The FSB proposes nine policy recommendations to manage NBFI leverage risks, focusing on improved risk monitoring, data, disclosures, market oversight, and cross-border cooperation. These aim for consistent regulatory treatment globally. Public comment is open until February 28, 2025, with a final report due mid-2025.