EEE Financial Services 2025: What Changes for Banks and Insurers

Key data

If your entity operates in the European Economic Area or has cross-border activity with Norway, Iceland or Liechtenstein, this regulation already affects you. Decision No. 302/2025 of the EEE Joint Committee, published on 16 April 2026 but in force since 5 December 2025, modifies Annex IX of the EEE Agreement relating to financial services, incorporating new EU regulation into the common legal framework of the EEE.

The objective is to ensure regulatory homogeneity between the 27 EU Member States and the three EEE countries that are not part of the EU: Norway, Iceland and Liechtenstein. Any financial entity operating in this expanded space must align its compliance with the new provisions incorporated.

What does this regulation establish?

The EEE Joint Committee is the body responsible for incorporating EU legislation into the EEE Agreement, so that European rules are also applicable in Norway, Iceland and Liechtenstein. When the EU approves new financial regulation, the Joint Committee transfers it to the EEE Agreement through decisions such as this one.

Decision 302/2025 specifically modifies the Annex IX of the EEE Agreement, which is the annex dedicated entirely to financial services. The modification incorporates new EU regulation that may affect the following areas:

• Authorization requirements: conditions for operating in the EEE space as a financial entity.
• Supervision: obligations towards the supervisory bodies of EEE countries.
• Transparency: new information and disclosure requirements.
• Market conduct: rules of conduct for financial sector operators.

The specific scope of the EU rules incorporated determines which of these areas are affected in each case. Entities must review the full text of the Decision to identify the specific provisions that have been added to Annex IX.

Economic and operational impact

The direct impact of this modification is operational and compliance in nature. It is not a fee or sanction with a fixed amount, but rather an update of the regulatory framework that can generate relevant indirect costs:

• Review and update of internal procedures for authorization and supervision to adapt them to the new provisions.
• Compliance costs associated with the review of contracts, internal policies and reporting systems in operations with Norway, Iceland and Liechtenstein.
• Risk of retroactive non-compliance: given that entry into force was 5 December 2025 and publication occurred on 16 April 2026, entities must verify whether there is an adaptation period or whether they were already obligated from the date of entry into force.
• Impact on cross-border activity: companies with active operations in the three non-EU EEE countries are the most exposed to immediate operational changes.

Regulatory harmonization also has a positive side: it facilitates cross-border operations by reducing regulatory divergences between EEE countries, which can simplify processes in the medium term.

Who does it affect?

• Banks and credit institutions with activity in the EEE space, especially those operating in Norway, Iceland or Liechtenstein.
• Insurers with presence or product distribution in non-EU EEE countries.
• Investment firms that provide services in the EEE or have clients in the three non-EU EEE countries.
• Financial entities with cross-border activity that are already subject to the EEE Agreement and must keep their compliance updated.
• Compliance, legal and regulatory departments of any financial group with presence in the EEE.
• Advisors and consultants providing services to financial entities with operations in the EEE space.

Practical example

A Spanish insurer that distributes life insurance products in Norway through a local branch is subject to the EEE Agreement. With Decision 302/2025, if the EU rules incorporated into Annex IX include new transparency or market conduct requirements, this insurer will need to:

1. Identify which specific EU provisions have been incorporated into Annex IX through this Decision.
2. Assess whether those provisions affect its products, contracts or sales processes in Norway.
3. Update its contractual documentation, product sheets and internal supervision procedures to comply with the new standards from 5 December 2025.
4. Communicate the changes to its local team in Norway and verify that the Norwegian supervisor has not issued additional implementation instructions.

The same exercise applies to an investment bank with operations in Iceland or a fund manager with clients in Liechtenstein.

What should companies do now?

1. Consult the full text of Decision 302/2025 in the EU Official Journal to identify exactly which EU rules have been incorporated into Annex IX of the EEE Agreement.
2. Assess the specific impact in the areas of authorization, supervision, transparency and market conduct according to the entity's specific activity in the EEE.
3. Review the entry into force date (5 December 2025) and determine whether there is a transitional period or whether adaptation should have already occurred.
4. Update compliance programs to incorporate the new provisions, especially regarding operations with Norway, Iceland and Liechtenstein.
5. Coordinate with local teams in non-EU EEE countries to verify whether national supervisors have issued additional implementation instructions.
6. Document the adaptations made to be able to demonstrate compliance to supervisory bodies if required.