European Insurance and Occupational Pensions Authority updates
EIOPA: Implementation of Generative AI
The European Insurance and Occupational Pensions Authority (EIOPA) has published a report on the use of Generative AI (Gen AI) across Europe’s Insurance sector. The report shows that adoption is increasing rapidly, with almost two‑thirds of insurers already experimenting with Gen AI, mostly at proof‑of‑concept stage, as they seek efficiency gains, cost reductions, better customer experiences and improved decision‑making.
Current applications focus largely on internal operational tools such as data extraction, document and content generation, and coding or underwriting support, while some firms are also developing customer‑facing chatbots and voicebots. Key challenges include data privacy, security, regulatory compliance and shortages of skilled staff, with hallucinations identified as the most significant risk.
Insurers also rely heavily on third‑party providers, emphasising the importance of frameworks such as DORA and the AI Act in managing external dependencies. Reflecting the evolving risk landscape, nearly half of insurers have now adopted dedicated AI policies, a notable increase from 2023.
EIOPA: Authorisation and supervision of undertakings owned by private equity firms
EIOPA has published a consultation paper on the authorisation and ongoing supervision of (re)insurance undertakings related to private equity firms aimed at promoting consistent, high-quality and risk-based supervision across the EU. The proposed supervisory statement sets expectations for the assessment of qualifying holdings, portfolio transfers, mergers and ongoing supervisory practices, applying principles of proportionality and risk‑based oversight. The consultation remains open until April 2026.
EIOPA: Central Bankers speech
EIOPA has published a speech delivered by Petra Hielkema, EIOPA Chairperson, at the authority’s 15th Anniversary Conference. In her speech, Ms Hielkema highlighted its progress in strengthening EU insurance and pensions supervision and its expanded role across newer regulatory frameworks. She stressed that geopolitical tensions, demographic pressures and climate‑related risks demand deeper supervisory unity and a more resilient Single Market, supported by EIOPA’s 2030 strategy focused on convergence, protection gaps and technology‑enabled supervision. She concluded by underscoring the need for continued cooperation to ensure the sectors remain trusted, resilient and prepared for future challenges.
EIOPA: Risk Dashboard shows a stable risk landscape
EIOPA has published a risk dashboard for institutions for occupational retirement provision (IORPs). Overall, the risk dashboard indicates that the macroeconomic environment is stable, backed by GDP growth and lower inflation, despite geopolitical tensions in Venezuela, Iran, and Greenland. Sovereign and corporate bonds have tightened slightly, but increased public spending on defence and infrastructure may push spreads higher.
EIOPA: Revised Single Programming Document 2026-2028
EIOPA has published a document (PDF, 1.4MB) setting out the EIOPA’s Revised Single Programming Document 2026-2028. The plan outlines strategic priorities such as strengthening Single Market integration through aligned, risk-based supervision, strong cross-border oversight, and work on internal models; boosting resilience with systemic risk monitoring, EU-wide stress tests, implementing the Insurance Recovery and Resolution Directive (IRRD), improving cyber coordination, and providing guidance on Insurance Guarantee Schemes. It also advocates for more streamlined, proportionate regulation by leveraging data sharing, SupTech, and AI. Oversight will extend to critical third-party providers under the Digital Operational Resilience Act (DORA), with further progress in sustainability supervision and efforts to address protection gaps.
EIOPA: Strategy t 2030
EIOPA has published a document setting out its strategy towards 2030 and its key areas of focus in an era marked by heightened geopolitical tensions, economic fragility, as well as environmental and technological challenges. This complex landscape calls for smart regulation and impactful supervision to deliver tangible benefits for Europe’s citizens and businesses. Looking ahead to 2030, EIOPA’s top priorities will be to strengthen the single market, improve society’s resilience to risks, and enhance regulatory and supervisory effectiveness. The objectives related to greater resilience focus on strengthening risk assessment capabilities, improving both the availability of data on and awareness of critical protection gaps, including in pensions, natural catastrophes, and cyber threats, as well as enhancing cross-sectoral collaboration.
EIOPA: Reappoints two management board members for a second term
EIOPA has published a press release announcing the reappointment of two Management Board members for a second term. Ante Žigman, President of the Board of the Croatian Financial Services Supervisory Agency, and Teija Korpiaho, Chief Advisor of Insurance Supervision at the Finnish Financial Supervisory Authority, will continue to serve on the Board for an additional two and a half years.
ESAs publish joint Guidelines on ESG stress testing
The European Supervisory Authorities (EBA, EIOPA and ESMA - the ESAs) have published their Joint Guidelines (PDF, 415KB) on environmental, social, and governance (ESG) stress testing. These Guidelines provide national insurance and banking supervisors with clear guidance and standards on how to integrate ESG risks into their supervisory stress testing methodologies and outline the necessary organisational and governance arrangements.
European Supervisory Authorities and UK financial regulators sign Memorandum of Understanding on oversight of critical ICT third-party service providers under DORA
The European Supervisory Authorities have signed a Memorandum of Understanding (MoU) (PDF, 3.6MB) with the Bank of England (BoE), the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA). This agreement enhances the cooperation between the authorities to oversee critical ICT third-party service providers (CTPPs) as required by the Digital Operational Resilience Act (DORA). The MoU aims at enhancing third-party risk management and contributing to the overall operational resilience of the financial sector in the EU and UK through strong cross-border cooperation between the relevant authorities responsible for EU CTPPs/UK critical third parties oversight.