Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

EBA Updates Validation Rules Packages With Quarterly Small Package Released September 14, 2026

EBA Updates Validation Rules Packages With Quarterly Small Package Released September 14, 2026

By
Regulatory data powered by Corlytics
The European Banking Authority has published its latest validation rules update (dated 14/09/2026) along with a new small validation package covering rule deac…
🔒
Cancel anytime
Full archive access
Custom alerts
Key Takeaways
  • The European Banking Authority has published its latest validation rules update (dated 14/09/2026) along with a new small validation package covering rule deactivations, reactivations, and severity changes.
  • Reporting institutions and their data teams must align taxonomy and Data Point Model (DPM) implementations to avoid validation failures and inconsistent regulatory submissions.
Deep Dive

The European Banking Authority has published its latest validation rules update (dated 14/09/2026) along with a new small validation package covering rule deactivations, reactivations, and severity changes. Reporting institutions and their data teams must align taxonomy and Data Point Model (DPM) implementations to avoid validation failures and inconsistent regulatory submissions.

The validation rules are a core component of the EBA technical package for reporting requirements. They are updated with each new technical package release, roughly two months before the first reference date of a framework release (for corrections), and through quarterly "small validation rules packages." The rules are split into two files: one for framework releases 4.0 and later, and one for releases up to and including 3.5. Compliance and regulatory reporting teams need to confirm which file applies to each reporting framework version they submit under.

Small packages can include deactivations, reactivations, and changes to rule severity. They apply only to framework release 3.0 and later. They are typically published about 20 days before quarter-end reference dates (around 10 March, 10 June, 10 September, and 10 December). From release 4.0, each deactivation exercise requires a small package so that rules are deactivated consistently in both the taxonomy and the DPM. When severity changes are included, the package contains a micro taxonomy package (set folder only), DPM severity/deactivation update scripts, and an Excel file of the validation rules. The latest small package is dated 14/09/2026, following earlier packages dated 10/06/2026, 16/04/2026, 12/12/2025, 15/09/2025, and 12/06/2025.

The 16/04/2026 package carries a notable data-quality warning. The micro taxonomy was republished on 09/04/2026 because of inconsistencies between the taxonomy and the database for two rules. Rule v11108_m was active in version 4.0 but deactivated in 4.2. Rule v89776_s was deactivated in 4.1 and reactivated in 4.2. Neither change was initially reflected in the taxonomy. Institutions that ingested the original package may have mismatched rule behavior and should verify they are using the corrected version. The 14/09/2026 package falls close to the 30 September quarter-end reference date, leaving limited time for implementation and testing.

Recommended actions:
- Download the 14/09/2026 validation rules files and small package, and confirm the correct file for each framework release in use.
- Apply the DPM update scripts and micro taxonomy in a test environment before production.
- Reconcile internal rule sets against the corrected 16/04/2026 package, specifically rules v11108_m and v89776_s.
- Review any severity changes for effects on submission workflows, error handling, and sign-off controls.
- Document version control and change management evidence, and assign an owner to monitor the quarterly cadence and EBA news items.

Risk implications: The direct regulatory impact is moderate, but the operational risk is real. Out-of-date or inconsistent rule sets can cause false validation errors, missed genuine errors, rejected submissions, or resubmissions, all of which can affect data quality and supervisory confidence. Tight timing near reference dates and the demonstrated taxonomy/DPM inconsistency raise the importance of disciplined testing and version control.

Source: European Banking Authority

Oops! Something went wrong