Search QAs

Where can I find information about which RTS and ITS that are under review due to the revised Solvency 2 Directive, whis is the status regarding these ITS and RTS as well as when the revised ITS and RTS will come into force (I believe 30 January 2027)?

Could EIOPA clarify the applicable language requirements for these disclosures? Specifically, is it permissible to publish both the policyholder-oriented SFCR summary and the full SFCR in English, or must the summary SFCR be published in the local language of the respective Member State?

If local…

Vulnerability assessments are usually one-shot activities that are done "on a project-by-project" basis by changing supplier from time to time and usually have a limited duration of 1 or 2 months. Do these agreements need to be recorded in the Register of Information?

Dear EIOPA Q&A Team,
I am writing to seek further clarification regarding the recent revision to Q&A 2975.
We have reviewed the revised guidance, but there remain some points of ambiguity which, if interpreted as written, could have significant implications for the classification of our bond port…

With reference to the EIOPA Q&A (in particular DORA030–2999), we would like to request clarification on the required alignment between the contractual counterparty and the actual provider of the ICT service that is in scope of DORA.

I would like to inquire regarding the implementation of DORA in a the telco industry here in Greece. What are the requirements regarding the application of DORA? Should it flow through the Enterprise Risk Management function? Does a telco company in Greece have to implement DORA for regulation purpo…

We're migration our contract management system to a new system. The new one will have new range of numbers for the contractual arrangement reference number. How do we deal with the old ones? Do we have to keep them in the register or can we use the new one in the whole register?

In the situation where we have 2 entries in B.01.02 with different C0100 currencies and there is an intra-group contracts between them, which currency should be used in B.02.01 C0040? Should it be the currency of the buyer of ICT services or the currency or the supplier?

Why are the outsourcing requirements of Article 28(3) RTS (S)RMF concerning the simplified ICT risk management framework (Art. 16 DORA) more stringent than those of the regular ICT risk management framework? Would an alignment of Art. 6(10) DORA and Art. 28(3) RTS (S)RMF concerning this point be fea…