Meridian › Archive › 2026-08-27
The EBA published draft Regulatory Technical Standards under CRR3 Article 323(2), specifying institutions' operational risk obligations set out in Article 323(1), points (a) to (h), scaled to each institution's size and complexity.
Banks and other credit institutions regulated under the EU Capital Requirements Regulation.
The draft turns a broad legal obligation into a standard institutions can be measured against, with size and complexity determining how much evidence is expected.
Institutions might map current operational risk documentation against Article 323(1), points (a) to (h), with their own advisers before the RTS is finalized.
Consultation stage is open; the source gives no closing date for comment or effective date.
The obligation under Article 323(1) already exists — what the RTS specifies is what counts as evidence of meeting it. Documentation sized to institutional complexity means untracked practice and no practice will read the same. — IDV
Primary source: European Banking Authority — read in the original, not from coverage. Source ID: eu-eba