New EEE 2026 obligations: what banks and financial services must review with operations in Norway, Iceland and Liechtenstein

Key data

Spanish financial entities with a presence in Norway, Iceland or Liechtenstein have a new compliance review obligation on the table. The Decision 96/2026 of the EEE Joint Committee, adopted on 20 March 2026 and published on 25 June 2026, amends Annex IX of the EEE Agreement, which regulates financial services in the European Economic Area. The practical result: the new EU legislation or regulatory update that incorporates this decision becomes mandatory in the three EEE countries that are not members of the European Union.

For banks, insurance companies and fund managers operating in these markets, this means a review of the regulatory compliance framework in each of those territories. Failing to act in time could result in non-compliance with authorization, reporting or capital requirements in markets where supervision is rigorous.

What does this regulation establish?

The EEE Agreement allows Norway, Iceland and Liechtenstein to participate in the European single market without being EU members. To do so, the EEE Joint Committee periodically adopts decisions that incorporate EU legislation into the annexes of the Agreement, making it applicable to these three countries.

Decision 96/2026 specifically amends Annex IX, dedicated to financial services. This means that the new EU financial regulation incorporated through this decision — including potential changes in financial products, authorization requirements, reporting obligations or capital requirements — is now applicable in Norway, Iceland and Liechtenstein with the same scope as in EU Member States.

The regulatory harmonization facilitated by this mechanism has two sides: on the one hand, it simplifies access to the single financial market for entities already operating under the EU framework; on the other, it can entail new specific obligations that must be identified and managed market by market.

Economic and operational impact

The direct impact depends on the specific content of EU legislation that this decision incorporates into the EEE Agreement. Based on available data, the operational effects for affected entities are concentrated in three areas:

• Regulatory compliance review: Entities with operations in Norway, Iceland or Liechtenstein must verify whether the changes introduced in Annex IX affect their current products or services in those markets.
• Authorization requirements: If the incorporated regulation modifies market access conditions or authorization requirements, it may be necessary to update licenses or communications to local supervisors.
• Reporting or capital obligations: Harmonization may entail new periodic information requirements or adjustments to capital buffers applicable in these territories.

The cost of inaction can be significant: operating in an EEE market without complying with new requirements derived from an EEE Joint Committee decision exposes the entity to sanctions from local supervisors (Finanstilsynet in Norway, FME in Iceland or FMA in Liechtenstein), which apply sanctioning regimes aligned with European standards.

Who does it affect?

• Spanish or European banks and credit institutions with branches, subsidiaries or active financial passport in Norway, Iceland or Liechtenstein.
• Insurance and reinsurance companies with activity in the three non-EU EEE countries.
• Investment fund and pension fund managers that market or manage assets in these markets.
• Investment services companies (ISCs, brokers, platforms) with active EEE passport towards Norway, Iceland or Liechtenstein.
• CFOs and compliance officers of financial groups with cross-border structure in the EEE.
• Legal advisors and compliance consultants serving financial entities with presence in the EEE.

Practical example

A Spanish fund manager that markets its products in Norway under the UCITS passport of the EEE Agreement must, following the entry into force of Decision 96/2026, verify whether the EU legislation incorporated into Annex IX modifies any of the requirements applicable to its activity in that market: for example, new investor information obligations, changes in investment limits or additional authorization requirements from Finanstilsynet (the Norwegian financial supervisor).

If the fund manager does not conduct this review and continues operating under the previous framework, it exposes itself to regulatory non-compliance in Norway that could result in supervisor requirements, passport suspension or sanctions. The first step is to identify what specific EU legislation has been incorporated through this decision and map its impact on each product and service active in the three EEE countries.

What should companies do now?

1. Identify the incorporated EU legislation: Consult the full text of Decision 96/2026 in the Official Journal of the EU to determine what specific rules have been added to Annex IX of the EEE Agreement.
2. Map the impact by country and business line: Review what products, services or authorizations are active in Norway, Iceland and Liechtenstein and verify whether they are affected by the changes introduced.
3. Review authorization requirements: Check whether the incorporated regulation modifies market access conditions or requires additional communications to local supervisors (Finanstilsynet, FME, FMA).
4. Evaluate new reporting or capital obligations: Determine whether harmonization introduces new periodic information requirements or adjustments to capital buffers applicable in these territories.
5. Update the regulatory compliance program: Incorporate the identified changes into the group's cross-border compliance plan, with defined responsibilities and timelines.
6. Document the impact analysis: Keep written record of the review conducted, regardless of whether new obligations are detected or not, to demonstrate diligence in the event of possible inspections.

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601244