On 12 June 2025, the European Securities and Markets Authority (ESMA) published principles on third-party risks supervision.
The 14 principles on third-party risks have been developed to address the growing risks observed over recent years in the use of outsourcing, delegation or other types of third-party services by supervised firms. They take into account and are consistent with established international standards and are non-binding. The principles provide a common supervisory basis for Member State competent authorities (NCAs) and ESMA. ESMA will support the implementation of the principles through supervisory discussions and case studies among NCAs.