EBA third-party risk guidelines: what changes for Germany For EBA third-party risk guidelines, the European Banking Authority (EBA) published its final text, EBA/GL/2026/09, on 18 September 2026. It covers any service other than ICT (information and communication technology) services that supports a function on a recurrent or ongoing...

Million-euro loan reporting Germany ends 30 December 2026 For million-euro loan reporting Germany, the last report covers the reporting date of 30 September 2026. The quarterly notification of loans of EUR 1 million or more under § 14 of the German Banking Act (Kreditwesengesetz, KWG) ends on 30 December 2026, while large...

Outsourcing vs external procurement: MaRisk rules in 2026 For outsourcing vs external procurement, the German Minimum Requirements for Risk Management (MaRisk) ask one question: would the institution otherwise perform the activity itself? Since the ninth MaRisk amendment of 30 June 2026, services covered by the EU Digital Operational...