ECB Decision (EU) 2026/1942 on personal data processing in prudential supervision of credit institutions enters into for

Original title: Decision (EU) 2026/1942 of the European Central Bank of 30 July 2026 on the processing of personal data in the context of the prudential supervision of credit institutions (ECB/2026/18)

The European Central Bank adopted Decision (EU) 2026/1942 on 30 July 2026, which enters into force on 4 August 2026, to govern the processing of personal data in the context of prudential supervision of credit institutions. The decision operates within the framework of Regulation (EU) 2016/679 (GDPR) and establishes the ECB's legal basis and procedures for handling personal data of individuals related to supervised credit institutions. Credit institutions and their personnel subject to ECB prudential supervision must ensure compliance with the ECB's personal data processing requirements as defined in this decision.

What changed

• ECB Decision (EU) 2026/1942 enters into force, establishing a formal framework for the ECB's processing of personal data in prudential supervision activities of credit institutions.
• The decision provides the legal basis under GDPR (Regulation EU 2016/679) for the ECB to process personal data necessary for conducting prudential supervision of credit institutions.

Who is affected

Credit institutions subject to ECB prudential supervision and individuals (employees, management, shareholders) whose personal data may be processed by the ECB in the context of supervisory activities.

Summary generated by a language model; the official text prevails. Not legal advice.