Search QAs

I am writing to raise a technical query regarding the XBRL/DPM taxonomy implementation concerning cell C0010/R0187 in S.01.02.01 and S.01.02.04.

Based on the official log files, we have identified a discrepancy in the allowed values. While the individual template permits three distinct values (en…

According to art. 13, par. 13, letter a) from the Directive the risk is situated in the member state in which the building is situated.
However, let's assume that this provision is transposed in two member states but in a way that the risk is not situated where the building is, but where the immova…

Three independent insurance companies have entered a pooled outgoing reinsurance contract covering Nat Cat (windstorm) and Man-Made Cat (fire). Capacity covers the three companies individually (both perils at the same time). Capacity also covers the sum of their windstorm perils but not the sum of t…

Where can I find information about which RTS and ITS that are under review due to the revised Solvency 2 Directive, whis is the status regarding these ITS and RTS as well as when the revised ITS and RTS will come into force (I believe 30 January 2027)?

Could EIOPA clarify the applicable language requirements for these disclosures? Specifically, is it permissible to publish both the policyholder-oriented SFCR summary and the full SFCR in English, or must the summary SFCR be published in the local language of the respective Member State?

If local…

Vulnerability assessments are usually one-shot activities that are done "on a project-by-project" basis by changing supplier from time to time and usually have a limited duration of 1 or 2 months. Do these agreements need to be recorded in the Register of Information?

Dear EIOPA Q&A Team,
I am writing to seek further clarification regarding the recent revision to Q&A 2975.
We have reviewed the revised guidance, but there remain some points of ambiguity which, if interpreted as written, could have significant implications for the classification of our bond port…

With reference to the EIOPA Q&A (in particular DORA030–2999), we would like to request clarification on the required alignment between the contractual counterparty and the actual provider of the ICT service that is in scope of DORA.

I would like to inquire regarding the implementation of DORA in a the telco industry here in Greece. What are the requirements regarding the application of DORA? Should it flow through the Enterprise Risk Management function? Does a telco company in Greece have to implement DORA for regulation purpo…