The ECB regulates how personal data is treated when supervising European banks
14 Aug 2026Effective: 14 Aug 202638 views
Who is affected:
Credit institutions under supervision, ECB, national banking supervisory authorities
Summary
The European Central Bank establishes the rules for processing personal data during prudential supervision of credit institutions. It defines responsibilities between the ECB and national competent authorities.
Detailed analysis
PRO
Decision ECB/2026/18 regulates the processing of personal data in the Single Supervisory Mechanism (SSM), establishing that the ECB and national competent authorities (NCA) act as joint controllers of processing. Supervisory tasks involving joint processing are defined: suitability procedures, authorizations, ongoing s…
PRO exclusive content
Implicaciones prácticas, plazos y recomendaciones específicas para tu sector.
CELEX:32026D1942: Decisión (UE) 2026/1942 del Banco Central Europeo, de 30 de julio de 2026, sobre el tratamiento de datos personales en el contexto de la supervisión prudencial de las entidades de crédito (BCE/2026/18)
The Spanish cooperation agency and the data protection authority join forces to train Latin American authorities in privacy and AI. Includes virtual courses and...
Ibero-American data protection authorities and participating public bodies
A drafting error in the European regulation on health data is corrected. The change is purely textual and does not alter the content or obligations of the regul...
National digital health authorities and health data regulatory bodies in the EU
The EU and Iceland agree to share flight booking data (PNR) to combat terrorism and serious crimes. It affects travelers flying between both territories.
Airlines with EU-Iceland routes, air passengers and security authorities
The European Union signs an agreement with Iceland to exchange passenger flight data (PNR) for security purposes. It allows sharing information such as name, it...
Airlines with EU-Iceland flights, passengers and security authorities
The European Commission denies registration of a citizen initiative requesting a halt to mandatory digital identity and age verification on the internet. Withou...
European citizens, initiative promoters, digital platforms and internet users
Messaging apps without phone numbers will be able to analyze content to detect child sexual abuse. This is a temporary exception to European privacy rules.
Providers of encrypted messaging apps and interpersonal communications operating in the EU