EEA Annex IX Financial Services 2026: what changes for entities operating in Norway, Iceland and Liechtenstein

Key data

If your financial entity operates in Norway, Iceland or Liechtenstein, or has counterparties in these countries, Decision No. 140/2026 of the EEA Joint Committee affects you directly. This decision, adopted on 30 April 2026 and published in the Official Journal of the EU on 23 July 2026, amends the Annex IX of the EEA Agreement, which regulates financial services in the expanded European Economic Area.

The practical effect is clear: the rules of the financial game are harmonized. What until now could be an exploitable regulatory difference between the EU and these three countries ceases to be so.

What does this regulation establish?

The European Economic Area (EEA) Agreement allows Norway, Iceland and Liechtenstein to participate in the EU's internal market without being Member States. For this to work, the EEA Joint Committee periodically updates the annexes of the Agreement to incorporate new EU legislation as it is approved.

Decision 140/2026 specifically amends Annex IX, dedicated to financial services. This means that the new EU financial regulations incorporated through this decision become mandatory in the three non-EU EEA countries as well.

The decision ensures that there are no regulatory differences between operating in an EU Member State and operating in these three EEA countries. For Spanish financial entities, this can mean both operational simplification and new obligations if the incorporated regulation is more stringent than what they were already applying in those markets.

Economic and operational impact

The specific impact will depend on which specific EU financial regulations are incorporated through this decision. What is already clear are the three areas of operational impact identified by the decision itself:

• Compliance requirements: Entities that already complied with EU regulations in their domestic operations may see their operations in EEA countries facilitated, as the same rules apply. Those with differentiated procedures will need to unify them.
• Reporting and information obligations: If the incorporated regulation includes new reporting requirements, these will also extend to operations in Norway, Iceland and Liechtenstein.
• Market access: Harmonization can open or condition access to these markets depending on how the incorporated regulation regulates the cross-border provision of financial services.

The most relevant positive effect is the elimination of regulatory arbitrage: until now, an entity could structure operations by taking advantage of regulatory differences between the EU and these EEA countries. With this decision, that margin is reduced or eliminated in the affected areas.

Who does it affect?

• Banks and credit institutions with branches, subsidiaries or cross-border activity in Norway, Iceland or Liechtenstein.
• Investment service firms that operate or distribute products in these markets.
• Insurance and reinsurance companies with presence or counterparties in the three non-EU EEA countries.
• Fund managers that market investment vehicles in the expanded EEA space.
• Payment and electronic money institutions with operations in these countries.
• CFOs and compliance officers of any financial group with exposure to non-EU EEA.
• Legal advisors and consultants providing services to financial entities with activity in these markets.

Spanish financial entities that have no operations or counterparties in Norway, Iceland or Liechtenstein are not directly affected by this decision.

Practical example

A Spanish fund manager that markets an investment fund in Norway through the European passport must review whether the EU financial regulations incorporated by Decision 140/2026 into Annex IX of the EEA Agreement modifies any of the requirements applicable to its activity in that market.

If, for example, the incorporated regulation affects investor information obligations or capital requirements, the fund manager will need to update its operational procedures in Norway to align them with the new standards, exactly as it did in Spain when that regulation entered into force in the EU. The advantage: if its internal processes already complied with EU regulations, adaptation to the Norwegian market will be minimal or non-existent.

Conversely, if the fund manager had differentiated procedures for Norway taking advantage of previous regulatory differences, it will need to unify them, which may involve costs for adapting systems, contracts and documentation.

What should companies do now?

1. Identify exposure: Determine whether your entity has operations, branches, subsidiaries or counterparties in Norway, Iceland or Liechtenstein. If not, this decision does not directly affect you.
2. Analyze the incorporated regulation: Consult the full text of Decision 140/2026 in the Official Journal of the EU to identify which specific EU financial regulations are incorporated into Annex IX and whether they affect your specific activity.
3. Review compliance procedures: Compare the requirements of the incorporated regulation with the procedures you already apply in your operations in the affected EEA countries. Identify gaps.
4. Update contracts and documentation: If there are changes in information requirements, reporting or market access, review contracts with counterparties in these countries and update regulatory documentation.
5. Coordinate with local compliance team: If you have local presence in Norway, Iceland or Liechtenstein, ensure that compliance teams in those countries are informed and aligned with the new requirements.
6. Monitor future EEA Joint Committee decisions: The EEA Joint Committee periodically updates the annexes of the Agreement. Establish a systematic monitoring process to not miss relevant changes to Annex IX.

Official source

Consult complete regulations in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601513