The EBA publishes revised Guidelines on internal governance, delivering greater proportionality and simplification for banks
AI Analysis
The EBA published revised Guidelines on internal governance under Directive 2013/36/EU (CRD), updating EBA/GL/2021/05 to reflect CRD VI, DORA and related supervisory developments. The final text retains expectations for management-body accountability, role-and-duty mapping, conflicts of interest, internal controls and third-country-branch governance, while reducing detail and applying greater proportionality; the final report does not specify an application date.
Key dates
- 2024-07-09
- Directive (EU) 2024/1619 (CRD VI) entered into force, introducing or strengthening governance requirements including responsibility mapping and a dedicated framework for third-country branches.
- 2025-01-01
- The CRD VI banking package began applying according to the EBA consultation materials, with the revised Guidelines intended to support implementation of the updated framework.
- 2026-11-05
- The EBA published the final revised Guidelines and the final report on internal governance.
Suggested considerations
- Compliance teams may wish to identify the competent authority’s expected adoption or comply-or-explain treatment once the final Guidelines are translated and formally notified, because no application date is specified in the published final report.
- Firms should consider performing a gap assessment against the final provisions on management-body responsibilities, senior-management and key-function-holder role statements, responsibility mappings, reporting lines, organisational structures and internal-control arrangements.
- Institutions may wish to review board and committee terms of reference, chair and executive-role combinations, conflict-of-interest registers, recusal controls and escalation procedures against the clarified expectations.
- Third-country-branch operators should consider mapping the new branch-specific governance requirements to the local branch manager, head-office governance, risk management, internal control, oversight and reporting arrangements, using the proportionality available in the final text.
- Firms should consider checking consistency between internal-governance documentation and DORA-related ICT risk, operational resilience, business-continuity and third-party-risk arrangements.
- Groups may wish to determine which entities fall within the Guidelines and whether responsibility mappings should be maintained at entity, branch and group levels, documenting the rationale for the chosen scope.
- Compliance teams may wish to retain evidence of proportionality assessments based on size, nature, scale and complexity, rather than removing governance controls solely because the final Guidelines are less granular than the consultation draft.
- Firms should monitor publication of the final Guidelines in all EU official languages and subsequent national competent-authority communications before setting internal implementation deadlines.
What changed
The Guidelines clarify the responsibilities of the management body, senior management and key function holders, including documented statements of roles and duties and a mapping of responsibilities. They address organisational structures, management of conflicts of interest—including situations where the chair also has executive functions—and key elements of internal control frameworks. They introduce or clarify governance expectations for third-country branches under CRD VI, with greater proportionality than in the consultation draft. Compared with the consultation version, the final text reduces the detail required for duty mappings and individual statements, simplifies conflict-of-interest provisions, makes third-country-branch provisions more proportionate and reduces the granularity o
Compliance impact
The publication is a significant supervisory-governance update rather than a standalone Level 1 legislative obligation, but competent authorities and supervisors may treat the Guidelines as an important benchmark for assessing compliance with CRD Article 74 and related governance provisions. The principal consequences are likely to be documentation, accountability and governance-model changes for
Who is affected
Related regulations
References
AI-generated analysis. May contain errors or omissions — verify with the original EBA source before acting. Full disclaimer.
What the EBA said
The European Banking Authority (EBA) today published its revised Guidelines on internal governance under the Capital Requirements Directive (CRD). The revised Guidelines reflect the changes introduced by CRD VI and form part of the EBA’s broader commitment to simplify the regulatory framework, strengthen…
Extract from EBA . Read the full notice at the source for the authoritative text.