On 1 September 2026, there was published in the Official Journal of the EU (OJ) Commission Delegated Regulation (EU) 2026/1119 setting out regulatory technical standards (RTS) specifying the information to include in applications for authorisation or recognition as an ESG rating provider, supplementing the ESG Ratings Regulation ((EU) 2024/3005).
Summary
The Delegated Regulation specifies common requirements for EU and non-EU applicants, plus additional information that non-EU entities must provide for recognition, in particular applicants must provide comprehensive information on:
- Corporate identity and ownership: legal status, group structure, shareholders, governance arrangements and organisational structure.
- Senior management and key personnel: details of directors and senior managers, including evidence of good repute and the absence of relevant criminal convictions.
- Resources and staffing: information on ESG rating analysts and other personnel involved in rating activities, including experience, skills, training and full-time equivalent staffing levels.
- Methodologies and rating processes: descriptions of ESG rating methodologies, models, controls, review procedures and systems used to develop, issue and monitor ratings.
- Internal governance and controls: policies and procedures covering compliance, risk management, record keeping, complaints handling and oversight arrangements.
- Conflicts of interest management: information demonstrating how the provider identifies, manages and mitigates conflicts, particularly where it carries out activities in addition to ESG rating services.
- Operational systems and technology: details of the systems, resources and procedures supporting ESG rating activities.
- Business separation arrangements: evidence that ESG rating activities are appropriately separated from any incompatible or potentially conflicting activities.
- Application formalities: all submissions must be machine-readable, clearly referenced, supported by documentary evidence and accompanied by a senior management attestation confirming that the information is complete and accurate.
For non-EU providers seeking recognition, additional information is required regarding their third-country operations and the conditions for recognition in the EU. Providers seeking to endorse ratings from non-EU group entities or to provide benchmarks must also supply further information set out in dedicated annexes.
Next steps
The Delegated Regulation enters into force on 2 September 2026. It applies from 2 July 2026, which aligns the application date of the Delegated Regulation with the application date of the ESG Ratings Regulation.