EPIF Position on the Consultation on draft Guidelines on the sound management of third-party risk

EPIF submitted its response to the EBA’s public consultation on its Draft Guidelines on third-party risk management with regard to non-ICT related services. While EPIF welcomes the EBA’s objective to enhance supervisory transparency and convergence for non‑ICT third‑party arrangements, we recommend four refinements to improve proportionality and efficiency for both supervisors and in-scope entities: • [...]

2025-10-13T09:45:15+00:00

Joint Letter on DORA ICT national registers

EPIF in coordination with the EACB and the ESBG has shared with EBA a Joint Letter on DORA (the Digital Operational Resilience Act). DORA entered into force in January this year.   This letter highlights industry’s concerns on what information ICT should or should not include in the national registers of ICT providers for the [...]

2025-07-25T13:01:07+00:00

EPIF response to the FSB Consultation on Data Frameworks

EPIF is delighted to share with you its contributions to the FSB consultation under the G20 Roadmap on aligning data frameworks. EPIF very much supports the efforts by the FSB to further promote the alignment and interoperability of data frameworks across jurisdictions and agrees with the overall assessment that the lack of interoperability of data [...]

2024-09-09T13:25:09+00:00

EPIF response to the European Commission’s consultation on Open Finance

EPIF is delighted to share its response to the European Commission targeted consultation on a open finance framework and data sharing in the financial sector. EPIF considers that primarily Open Finance has brought more payment solutions and more options available. Notwithstanding, often provisions are not phrased in a technology-agnostic manner and can be overly prescriptive, [...]

2022-07-05T16:20:10+00:00

Joint industry response to the EDPB consultation on Recommendations on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data

We endorse strong protections for personal data, including when data is transferred to third countries. We believe the Recommendations are key not only to ensuring consistency of the implementation of the CJEU’s decision in Schrems II, but also to help data exporters comply with the Court’s decision. But we have substantial concerns about some potential interpretations of the Draft Recommendations. Please see our response attached.

2020-12-21T09:07:27+00:00
Go to Top