EEA Financial Services 2026: what changes for companies with cross-border activity

Key data

Companies with cross-border activity in financial services within the European Economic Area have a new regulatory review obligation. The EEA Joint Committee Decision 33/2026, adopted on February 6, 2026, amends Annex IX of the EEA Agreement relating to financial services, incorporating new EU regulation into the legal framework applicable in Norway, Iceland and Liechtenstein.

The objective is to ensure regulatory financial homogeneity between the 27 EU Member States and the three EEA countries. This means that the rules of the financial game are equalized: what applies in Spain, France or Germany now also applies in Oslo, Reykjavik and Vaduz.

What does this regulation establish?

The Agreement on the European Economic Area (EEA) allows Norway, Iceland and Liechtenstein to participate in the European single market without being EU members. To do this, the EEA Joint Committee periodically updates the annexes of the Agreement to incorporate new European legislation as it is approved.

The Decision 33/2026 specifically updates Annex IX, which regulates financial services. Through this amendment:

• New EU financial regulation is incorporated into the legal framework of the EEA.
• This regulation becomes mandatory in Norway, Iceland and Liechtenstein.
• Financial entities operating within the EEA must adapt their procedures and compliance systems to the new requirements incorporated.
• It is ensured that financial rules are homogeneous throughout the expanded European economic space.

The decision was adopted on February 6, 2026 and published in the Official Journal on May 21, 2026, effective from the date of adoption.

Economic and operational impact

The direct impact of this decision is operational and compliance-related. It does not establish new fees or sanctions of its own, but it does require affected companies to align their procedures with the new financial requirements incorporated into the EEA.

The main consequences for affected organizations are:

• Review of internal procedures: Compliance departments must identify what new EU regulation has been incorporated into Annex IX and assess its impact on current operations.
• Adaptation of financial contracts and products: If the incorporated regulation affects products, services or financial contracts offered in EEA countries, it will be necessary to review and update their structure.
• Adaptation cost: The cost will depend on the scope of the EU regulation specifically incorporated. Entities with greater presence in the three non-EU EEA countries will have greater exposure.
• Risk of non-compliance: Since entry into force was February 6, 2026, companies that have not yet reviewed their compliance have accumulated months of possible non-compliance.

Who does it affect?

This decision directly affects:

• Financial entities (banks, insurance companies, fund managers, credit institutions) with operations in Norway, Iceland or Liechtenstein.
• Companies with cross-border activity in financial services within the EEA, including those providing services from Spain or other EU countries to the three non-EU EEA countries.
• International financial groups with subsidiaries or branches within the scope of the EEA Agreement.
• Financial advisors and consultants providing regulated services under the EEA Agreement in financial services.
• CFOs and compliance directors of any company operating under the EEA Agreement in financial services.

Companies operating exclusively within EU territory and without activity in Norway, Iceland or Liechtenstein are not directly affected by this decision, although they may be affected by the underlying EU regulation that has been incorporated.

Practical example

A Spanish financial entity providing asset management services in both Spain and Norway operates under the EEA Agreement. Until Decision 33/2026, its regulatory framework in Norway was governed by Annex IX of the EEA Agreement in its previous version.

With the entry into force of this decision on February 6, 2026, the new EU financial regulation incorporated into Annex IX becomes mandatory in its Norwegian operations. The compliance department of this entity must:

1. Identify what specific EU regulation has been incorporated into Annex IX through this decision.
2. Assess whether its products, contracts or procedures in Norway are affected by that regulation.
3. Adapt internal procedures and, if necessary, contracts with Norwegian clients before EEA supervisory authorities begin compliance inspections.

The same exercise applies to any company with financial operations in Iceland or Liechtenstein.

What should companies do now?

1. Identify if you operate within the EEA: Confirm whether your company provides financial services in Norway, Iceland or Liechtenstein, directly or through subsidiaries, branches or distribution agreements.
2. Review the full text of Decision 33/2026: Access the official source on EUR-Lex to identify what specific EU regulation has been incorporated into Annex IX of the EEA Agreement.
3. Assess the impact on your procedures: With the regulation identified, analyze whether it affects your products, contracts, operational processes or information requirements in non-EU EEA countries.
4. Adapt compliance systems: Update your internal procedures to incorporate the new requirements. If you have local teams in Norway, Iceland or Liechtenstein, ensure they are informed and aligned.
5. Document the review conducted: Keep a record of the impact analysis and measures taken. In the event of a supervisory inspection, this documentation proves the entity's diligence.
6. Establish an alert system for future updates: The EEA Joint Committee periodically updates the annexes of the Agreement. Implementing a regulatory monitoring system prevents future amendments from going unnoticed.