New EU supervisory reporting standards for banks: what changes in 2026

Key data

Compliance and reporting departments at European banks have a new technical obligation to manage: from May 28, 2026, the Implementing Regulation (EU) 2026/1166 sets out how the components of the activity indicator must be assigned to the supervisory information communication references. It is not a principles-based rule: it is a rule of exact correspondence, with no room for interpretation.

The stated objective is the harmonization of prudential reporting across the EU, eliminating the discretion that until now allowed each entity to apply its own criteria in the presentation of this data. From now on, the assignment must follow the technical map established by this regulation.

What does this regulation establish?

Regulation 2026/1166 establishes implementing technical standards (ITS) that determine, in a binding manner, how the components of the activity indicator must be assigned to the specific references used in the communication of information for prudential supervision purposes.

In practical terms, this means that:

• Each component of the activity indicator has a specific reporting reference assigned, with no possibility of alternative interpretation.
• Entities cannot apply their own classification criteria: they must follow the exact correspondence set by the regulation.
• The rule reduces the interpretative discretion that previously existed in the presentation of this data to supervisors.
• The framework is directly applicable in all EU Member States, without the need for national transposition.

This is a rule of a technical and operational nature, not a modification of capital or liquidity requirements. Its impact is on the internal processes for generating and sending supervisory data, not on the prudential ratios themselves.

Economic and operational impact

The direct impact of this rule is operational and compliance-related, not financial in terms of capital or provisions. However, the cost of adaptation can be significant for entities with legacy reporting systems or with inflexible data architectures.

The main impact vectors are:

• Review and update of regulatory reporting systems: entities must verify that their internal mapping of indicators exactly matches the references required by the regulation.
• Cost of technological adaptation: if current systems do not allow the exact correspondence required, it will be necessary to modify data flows, indicator catalogs or submission templates.
• Risk of supervisory requirements: non-compliance may result in formal requirements from national competent authorities (in Spain, the Bank of Spain) or European authorities (ECB in the case of the SSM).
• Risk of sanctions: beyond requirements, sustained non-compliance may result in administrative sanctions from supervisors.

The rule does not establish specific penalty amounts in its text (sanctions are governed by the sectoral regulations of each Member State and by the SSM framework), but the reputational and supervisory risk associated with non-compliance in reporting matters is high.

Who does it affect?

This regulation directly affects:

• Banks and credit institutions subject to prudential supervision in the EU, both under direct ECB supervision (significant institutions of the SSM) and under national supervision.
• Regulatory reporting departments responsible for the preparation and submission of supervisory information.
• Compliance departments responsible for verifying the adequacy of internal processes to regulatory requirements.
• Risk departments that participate in the generation of activity indicators included in supervisory reports.
• Technology and systems teams responsible for maintaining regulatory reporting platforms.
• CFOs and chief financial officers with responsibility for the integrity of information submitted to supervisors.

Practical example

Consider a medium-sized Spanish bank subject to supervision by the Bank of Spain. Until now, its reporting team applied an internal criterion to assign certain components of the activity indicator to the references in its supervisory templates, a criterion that had been validated internally but did not strictly follow any binding technical rule at the European level.

With the entry into force of Regulation 2026/1166, that internal criterion is no longer valid if it does not exactly match the correspondence established by the rule. The reporting team must:

1. Review the current mapping of activity indicator components against the references required by the regulation.
2. Identify discrepancies between the internal criterion and the exact correspondence set by the rule.
3. Adapt systems and templates so that the submission of supervisory information reflects the correct assignment.

If the bank does not make this adaptation and the supervisor detects an incorrect assignment in the reports, it may issue a formal requirement for correction. If the situation persists, it may lead to a sanctioning procedure under the applicable prudential regulations.

What should companies do now?

1. Review the current mapping of indicators: the reporting department must compare the current internal assignment with the references established by Regulation 2026/1166. This is the first step to identify whether there is a compliance gap.
2. Involve technology teams: if discrepancies are detected, regulatory reporting systems must be updated to reflect the exact correspondence required. A one-off manual adjustment is not sufficient: the process must be automated and audited.
3. Document the adaptation: compliance must be demonstrable to the supervisor. It is advisable to document the gap analysis, the measures adopted and the implementation date.
4. Train the teams involved: compliance, risk and reporting must understand the specific requirements of the rule to avoid errors in future submissions of supervisory information.
5. Establish periodic controls: incorporate verification of compliance with this rule in the internal review cycles of regulatory reporting, especially before each submission of supervisory information.
6. Consult with the supervisor if in doubt: in case of uncertainty about the interpretation of any specific correspondence, it is preferable to consult with the competent authority (Bank of Spain or ECB, as appropriate) before applying a criterion of your own that may be incorrect.

Official source

Consult the complete regulation at the official source (EUR-Lex, CELEX:32026R1166)

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R1166