Paris: The European Banking Authority published its EBA 2027 work programme on 30 September 2026, setting out the regulatory tasks that will occupy banks, supervisors and payment firms over the next year. The programme confirms that the agency, headquartered in Paris, will spend much of 2027 finishing the rules that give practical effect to existing EU banking law.

The first priority in the EBA 2027 work programme is the 2024 banking package. The authority will complete the technical standards and guidelines that implement the revised capital requirements, so that banks know exactly how the new rules apply to them. Lawyers at Norton Rose Fulbright, who analysed the programme, note that it lists this task first among its focus areas.

The second priority of the EBA 2027 work programme is the new payment services framework. The EBA will prepare the detailed rules that payment institutions and banks need once the legislation takes effect, an area where fraud, open banking and consumer protection overlap. Firms should expect consultations during 2027.

Crisis management and deposit insurance reforms form the third strand. The EBA 2027 work programme says the authority will support the work on bank crisis management, a subject that is likely to involve the Single Resolution Board and national deposit guarantee schemes. It also commits the agency to contribute to the Savings and Investments Union and to the securitisation agenda, two projects through which the Commission hopes to channel more private savings into European firms.

Supervision itself is changing. The authority will implement a new supervisory convergence framework, which aims to make national supervisors apply EU rules in a more uniform way. It will also strengthen its stress testing and simulation capacity, and advance integrated reporting and data sharing, so that supervisors work from comparable data instead of national templates.

Digital risk remains on the list. The EBA will strengthen its internal governance and IT resilience, and it will keep embedding the responsibilities it received under the Digital Operational Resilience Act, the Markets in Crypto-Assets Regulation and the European Market Infrastructure Regulation. Each of these laws added tasks that the authority must perform with the same staff, which makes prioritisation a real constraint.

The published summary gives no budget figures or deadlines, so the EBA 2027 work programme works as a statement of direction more than a timetable. Even so, banks can use it to plan compliance spending, since the order of tasks shows where consultations are likely to come first.

Readers should treat the EBA 2027 work programme as the agenda that national supervisors, resolution authorities and the Commission will follow. Its order of priorities shows that the authority wants to finish the banking package before it takes on new files, and that crisis management, payments and data will shape EU bank regulation through 2027.