FMA expands reporting requirements for granular credit data starting March 2027

The Financial Market Authority (FMA) has amended the Granular Credit Data Collection Regulation 2018 and redefined the circle of institutes subject to reporting obligations. The regulation was promulgated on October 14, 2026, in the Austrian Federal Law Gazette, Part II, as BGBl. II No. 300/2026. The central new regulations enter into force on March 1, 2027.

The legal basis for the regulation is § 75 Para. 4 of the Banking Act – BWG, BGBl. No. 532/1993, last amended by the Federal Act BGBl. I No. 46/2026. The Granular Credit Data Collection Regulation – GKE V 2018, BGBl. II No. 170/2018, last amended by the regulation BGBl. II No. 144/2024, is being amended. The regulation is signed by Ettl and Kühnel.

Expanded Circle of Institutes Subject to Reporting Obligations

§ 1 of the regulation, including the heading, is redefined and regulates the definitions. Accordingly, the following are considered institutes subject to reporting obligations:

• CRR credit institutions pursuant to Art. 4 Para. 1 No. 1 of Regulation (EU) No. 575/2013, as amended by the corrigendum OJ No. L 2026/90576 of July 17, 2026;
• CRR financial institutions pursuant to Art. 4 Para. 1 No. 26 of Regulation (EU) No. 575/2013, excluding financial holding companies pursuant to Art. 4 Para. 1 No. 20 and mixed financial holding companies pursuant to Art. 4 Para. 1 No. 21 of the same regulation.

Thus, the reporting and disclosure obligations are extended to a broader circle of Austrian institutes, while holding companies remain explicitly excluded.

New Definitions of Counterparty and Connected Customers

§ 1 also redefines the central reference terms. The group of connected customers now follows Art. 4 Para. 1 No. 39 of Regulation (EU) No. 575/2013. Reporting Member State, institutional unit, and legal entity are determined via Art. 1 No. 1, No. 3, and No. 5 of Regulation (EU) 2016/867 on the collection of granular credit data and credit risk data (ECB/2016/13).

The term counterparty will in future comprise five categories:

• creditors or shareholders;
• debtors or issuers;
• the natural person or institutional unit of a legal entity assigned to the risk positions;
• reference debtors of reference values;
• beneficiary.

Additionally, the last sentence of § 2 Para. 3 is deleted. In § 3 Para. 1, the phrase “and c” is deleted; in § 3 Para. 2 as well as in § 4, the phrase “and d” is deleted in each case.

Entry into Force and Reporting Dates

§ 4 Para. 2 No. 1 is redefined: Customers with a registered office or residence in Austria are captured if the member is superior to the debtor in a direct line or if the group of connected customers to be reported represents a large exposure for the institute subject to reporting obligations pursuant to Part 4 of Regulation (EU) No. 575/2013.

A staggered arrangement applies to the entry into force:

• § 4 Para. 2 Item 1 in the version of this Regulation shall enter into force on the day following its publication;
• § 1 including heading, § 3 Para. 1 and 2, as well as § 4 Para. 5 shall enter into force on March 1, 2027, and shall be applied for the first time to reports for the reporting date of March 31, 2027;
• the last sentence of § 2 Para. 3 in the version of the Regulation BGBl. II No. 144/2024 shall expire at the end of February 28, 2027.

For the affected institutes, the amendment entails an adaptation of their reporting and reporting systems to the new definitions and the expanded circle of addressees. The first report under the new law is due by the reporting date of March 31, 2027; until then, the previous version of the GKE V 2018 remains applicable.

Source: Austrian Federal Law Gazette, Part II, No. 300 of October 14, 2026, Regulation: Amendment of the Granular Credit Data Collection Regulation (official reference: BGBl. II No. 300/2026).