GRC Report Staff

EIOPA's Q&A 3507 explains that differences between firms' replicated Colombian peso (COP) risk-free rate curves and the published curve can arise from the timing of market data capture. Less liquid instruments may be updated by data providers after EIOPA's snapshot, and EIOPA identified a 3.4bp deviation at the 1Y maturity in this case. Compliance and actuarial teams that replicate RFR curves for Solvency II purposes should understand this limitation when reconciling their results.

The SEC has proposed amendments that would modernize proxy solicitation rules by eliminating the annual report delivery requirement for registrants, removing the delivery deadline for documents incorporated by reference into proxy statements, and ending certain soliciting material filings. The proposal would also shorten the minimum broker search period. Compliance teams at issuers, broker-dealers, and intermediaries should assess operational impacts now, even though the rules are not yet final.

EIOPA has agreed that the 2023 ITS amendments (taxonomy 2.10.0) conflict with its earlier Q&A 2753 on mapping loan CIC codes 86, 87 and 88 to Solvency II balance sheet lines R0240 and R0250. Q&A 2753 will be amended, but the revised wording has not yet been published. Insurers should treat the ITS as the governing text and review their S.02.01 and S.06.02 mappings for consistency.

An ECB working paper (No 3282) analyzes the 2020 Austrian corporate loan moratoria. It finds a 44% take-up rate, higher investment and profitability, and no spike in defaults once repayments resumed. The paper is research, not binding regulation, and does not represent ECB views. It can still inform how banks and compliance teams prepare for future crisis relief programs, including forbearance, staging, and stigma risks.

The Deutsche Bundesbank's Executive Board completed its statutory consultation under section 7 (3) of the Bundesbank Act on September 16, 2026, and raised no objections to Dr Philipp Nimmermann's nomination. The outcome has been communicated to the Bundesrat. This is a governance and personnel update with no new regulatory obligations, but compliance teams should track the resulting leadership change and the pending allocation of portfolios.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning on the website swissinvestmentsa.ch, which the source material links to a prior warning from the Swiss regulator FINMA. Compliance teams should treat the domain as a suspected unauthorized or fraudulent investment operation and update screening and client-protection controls accordingly.

On September 16, 2026, the ESAs published 14 operational instructions to harmonize how major ICT-related incidents are reported under DORA and to fix recurring data quality issues. The instructions are non-binding "best efforts" guidance, but they were agreed with competent authorities and signal supervisory expectations. Compliance teams should align reporting templates and procedures now to avoid rejected, inconsistent, or duplicated submissions.