On 24 April 2024, the European Parliament voted to approve the amendments to the Capital Requirements Regulations (CRR) and Capital Requirements Directive (CRD) proposed within the Banking Package put forward by the European Commission in October 2021.
The final approved version is expected to be published in the EU’s Official Journal within the coming weeks. These amendments, commonly referred to as CRR III and CRD VI respectively, are set to come into effect on 1 January 2025.
Compared to previous amendments in the capital requirements, CRR III is expected to have varying degrees of impact on the capital requirements of banks, depending on the specific business model of banks.
Let’s take a look at the key changes and their impact on banks:
CRR III has introduced some changes to various aspects of the Standardised Approach for Credit Risk (SA-CR), the approach used to quantify credit risk by local banks.
The Fundamental Review of the Trading Book (FRTB) initiated by the Basel Committee on Banking Supervision (BCBS) following the 2008 recession has now been fully incorporated into CRR III. The FRTB seeks to comprehensively reshape and fortify regulations and requirements governing trading book activities, including a revision of trading book boundaries.
Instruments shall be assigned to either the trading or banking (non-trading) book, with a consistent allocation framework for instruments based on their trading intent, fostering regulatory coherence. Several instruments are now immediately allocated to the trading book, such as securities underwriting commitments, instruments with a clear trading purpose under the applicable accounting framework and listed equities. However, for some instruments, such as listed equities, a derogation from allocation to the trading book may be possible, subject to regulatory approval.
The small trading book derogation, i.e. trading book business is equal to or below both 5% of the bank’s total assets and €50 million, still applies.
The methods for market risk capital requirements have largely remained the same.
CRR III has introduced a new standardised approach for measuring the minimum capital requirements for operational risk, applicable to all banks. The new approach revolves around a business indicator component (BI), which determines the own funds requirement for operational risk. This approach treats different business models equally and considers different business types proportional to their impact on a bank.
The BI is derived from three primary components:
the Interest, Lease and Dividend Component (ILDC);
the Service Component (SC); and
the Financial Component (FC).
Each component is further broken down into several sub-components, which correspond to income statement and balance sheet components. Using predefined formulas that account for the unique features of each component, individual portions of the BI are determined.
The European Banking Authority (EBA) has also recently published a consultation paper to provide further details on each of these components, including a mapping of each sub-component to specific references from FINREP returns.
The existing methods for calculating own funds requirements for Credit Valuation Adjustment (CVA) risk, the risk arising from variations in CVA values due to movements in counterparty credit spreads and market risk factors, have been replaced with three new approaches:
The Standardised Approach (SA-CVA), requires banks to calculate CVA sensitivities to different risk factors - this approach requires supervisory approval;
The Basic Approach (BA-CVA), which banks can utilise without supervisory approval, does not rely on sensitivities and has two versions, a full or reduced version, depending on whether the bank holds any eligible hedging transactions; and
The Simplified Approach (SA-CVA), which is intended for banks with a derivatives business volume of less or equal to €100 million and not more than 5% of its total assets, may determine the own funds requirement for CVA risk by dividing the risk-weighted exposure amount for counterparty credit risk by a factor of 12.5.
CRR III introduces new requirements for the consideration of Environmental, Social, and Governance (ESG) risks in Pillar 1 and Pillar 3. These are based on uniform definitions provided by CRR III on ESG and complemented by corresponding Pillar 2 requirements enclosed in CRD VI. Some of the key requirements introduced include:
Under CRR III:
Identification disclosure and management of ESG risks;
The Implementing Technical Standard (ITS) on Reporting will be amended to ESG risks reporting; and
Extension of disclosure of ESG risks to all banks;
Under CRD VI:
Climate change risks can be addressed via the Systemic Risk Buffer (SyRB);
Incorporation of ESG risks for assessing internal capital needs and governance;
Introduction of sustainability dimension in the prudential framework to ensure identification, measurement, management and monitoring of ESG risks;
Inclusion of ESG risks in the SREP, as well as the development of standards for methodologies to stress test ESG risks.
CRR III introduces a Pillar 3 data hub that the EBA will maintain. Apart from small and non-complex institutions, banks will be required to submit data to the EBA at each reporting period, which will be published on this data hub. For small institutions, the EBA will generate the relevant disclosures through COREP and FINREP reports submitted to the regulators.
New disclosures under CRR III will require banks to enhance regulatory reporting around ESG risks, market risk and crypto assets. Amendments have also been made to reflect changes in other areas, such as the new standardised approach to operational risk.
CRR III is not merely an exercise at fulfilling supervisory reporting requirements; CRR III will change how a bank views the risk – and hence also the relationship between risk and return – of its products, customers and business lines. The impact of CRR III will depend on the respective bank’s business model and regulatory approach.
Generally, banks will need to assess the data requirements emanating from these regulatory changes, and accordingly decide whether updates are required in their systems to ultimately report to the competent authorities. This will require the derivation of a suitable assessment and implementation plan to close any data gaps that may exist in banks’ systems.
As a result, local banks are encouraged to quantify the impact of the introduction of CRR III and outline the necessary implementation stages that would be required throughout its business model, risk management and internal systems.