Entities
Access the database
Legal reporting encompasses all the periodic information to be transmitted to the CSSF by the entities under its supervision by observing the file transport and data protection instructions.
The page File transport and data protection provides additional technical details regarding the transmission channels for periodic reporting.
On 19 of June 2024, Regulation (EU) 2024/1623 (“CRR3”) and Directive (EU) 2024/1619 (“CRDVI”) of the European Parliament and of the Council have been published in the Official Journal of the EU. The CRR3 provisions are mostly applicable from 1 January 2025 (NB: some provisions already started to apply from 9 July 2024). Some provisions of the CRR3 are also subject to transitional arrangements and will be phased in over the coming years.
Commission Implementing Regulation (EU) 2021/451 was repealed and replaced by Commission Implementing Regulation (EU) 2024/3117 to align with the changes introduced by CRR3. It defines the scope, format, frequency, submission dates and explicit definitions regarding the different reporting requirements.
Circular CSSF 14/593, as amended, sets out the supervisory reporting requirements applicable to credit institutions.
In order to provide an overview of the bank’s periodical reporting requirements (national and harmonised reporting requirements) to the credit institutions, the CSSF has published a Reporting Handbook “Reporting requirements for credit institutions”, which constitutes an additional aid to ensure that the first level of the sequential approach (European harmonised prudential and financial information data flow from the CSSF to the ECB and, when applicable, to the EBA) works smoothly.
For the CSSF, this Reporting Handbook represents a means of communication with credit institutions; it contains all the necessary information that reporting entities need for the correct and timely submission of required reports. The document includes the technical specifications (e.g file naming conventions, requirements regarding XBRL instances) to be applied with regard to the abovementioned reporting obligations.
In addition to the Reporting Handbook, the CSSF provides reporting entities with a guidance by giving concrete examples (with illustrative figures) on how to properly fill in different reporting templates. The information disclosed by the CSSF in the Word document “Additional guidance for credit institutions related to specific reporting aspects” takes into consideration the guidance provided by the EBA Q&As so far. Nonetheless, the EBA could adopt a different position in future answers to Q&As that may result in the need to amend the checks and this note accordingly.
The list of deactivated EBA validation rules is downloadable in the Documentation section of this chapter (under “Guidance”).
In order to provide credit institutions and investment firms with information on validation rules that might be problematic for the reporters, the CSSF has published an Excel file “Status of problematic EBA Validation Rules” containing a sublist of validation rules laid down in Commission Implementing Regulation (EU) No 2021/451 that have been subject to questioning either by reporting entities or by the CSSF itself. In addition to this Excel file, the CSSF shares a complementary “Read me” Word document explaining inter alia the different severity status.
In addition to the validation rules laid down in Commission Implementing Regulation (EU) No 2021/451, the CSSF and the ECB carry out plausibility checks. In order to guide credit institutions, the CSSF published a document “CSSF and ECB – Plausibility checks – Final version” presenting these additional checks. CSSF plausibility checks are applicable to both credit institutions and investment firms as long as they are subject to the reporting of the modules on which the check is applied. The ECB EGDQ Checks are also applicable to both credit institutions and investments firms as long as their reporting modules are transmitted to the ECB. For those institutions that are not subject to ECB reporting transmission, those EGDQ checks should be considered as best practices.
Filing indicators are elements indicating reporting templates to be used by banks to signal which templates of reporting modules they intend to report/not to report (more information are available in PDF document “The correct use of filing indicators”). Templates to be declared by reporting entities depend on the structure of the banks, their characteristics (signaletic data : reporting on Solo or Conso basis, method for credit risk, etc.), the activities they are providing or the thresholds they are exceeding. In this regard, the CSSF and the ECB are applying a set of rules to the banks’ signaletic data to obtain the precise list of filing indicators Significant Institutions and Less Significant Institutions have to report to CSSF/ECB/EBA. These rules are precisely described in Excel document “Identification of Reporting Requirements”.
In addition, the EBA has issued in May 2023 the first version of an interactive signposting tool, that aims at supporting institutions in identifying relevant modules and templates for their reporting requirements.
The signposting tool helps institutions of different sizes and complexity identify their reporting requirements considering their type and the scope of their activities.
Article 96(6) of the PSD2 transposed in Luxembourg under Article 105-2 (3) of the Law of 10 November 2009 on payment services requires payment services providers to provide the CSSF with statistical data on fraud relating to the different means of payment. This requirement also concerns branches of EEA payment services providers established in Luxembourg.
The European Banking Authority issued guidelines providing details on these reporting requirements for fraud data. In Luxembourg, these reporting obligations were adopted via the CSSF Circular 19/712 addressed to all payment service providers and all branches of EEA payment service providers established in Luxembourg.
Based on the operational collaboration implemented between the Banque centrale du Luxembourg ( hereafter “BCL”) and the CSSF providing for a Single Data Flow, this reporting is to be sent to the BCL. Based on this Single Data Flow, the BCL is the single point of entry in charge of gathering all the fraud reporting from all payment services providers and all branches of EEA payment service providers established in Luxembourg.
This collaboration, and hence required reporting, is presently taking into consideration the amendments of the REGULATION OF THE EUROPEAN CENTRAL BANK of 1 December 2020 amending Regulation of 28 November 2013 No 1409/2013 on payments statistics (ECB/2013/43) which, as from January 2022, covers all fraud data required under both the EBA guidelines as amended and the aforementioned ECB regulation. In this respect, the BCL has published the Regulation BCL 2021/30 “Règlement de la Banque centrale du Luxembourg / N° 30 du 12 juillet 2021 en matière de statistiques de paiement” in order to clarify the reporting obligations of all payment service providers in Luxembourg. As from the reporting period 1 January 2022 onwards, the statistical data needs to be compiled by the payment service providers and provided to the BCL using the CDDP6.
The instructions and the template to be filled in by payment service providers in the reporting process can be directly found on the web site of the BCL (see link in the “Documents” section below).
For any question on this data collection, please contact the BCL by sending an email to paymentoversight@bcl.lu.
Besides the standardised EU regulatory reporting, there are reporting areas which are however covered by national provisions. These reports ask information on participating interest and subordinated loans (B2.4), information on staff expenses (B 2.5 B), details on taxes (B 2.5 E), an analysis of shareholdings (B4.5), information on persons responsible for certain functions and activities (B4.6).
The table, the instructions and schedule of conditions, including the technical instructions for the transmission of the table on information on participating interest and subordinated loans, as described in Circular CSSF 18/686 (only in French), are available for download in the Documentation section below (under “Forms” and “Guidance”).
Tables B 2.5 B on staff expenses and B 2.5 E on the details on taxes, Circular CSSF 17/664 relating to the survey on staff expenses and taxes (only in French), the technical document relating to the transmission as well as the luxembourgish XBRL taxonomy (zip file) of table B2.5 are available for download under the Documentaition section below (respectively under “Forms”, “Circulars” and “Guidance”).
The “Analysis of shareholdings” consists in information to be provided in a dedicated section of the eDesk procedure “National Banking Reporting” as indicated in Chapter 5, section 2, paragraph 2.1 of document “Reporting requirements for credit institutions – Final version” (available in the Guidance section of the Common European reporting part of this page).
The entities are required to submit at least a yearly submission with data reflecting the situation as of 31 December of the reference year by 20 January. This submission is mandatory even in the absence of change during the reference year. In addition, in case of signaletic modifications during the year, entities are required to update their submission.
Instructions related to B4.5 are available in the Guidance section below.
The “Persons responsible for certain functions and activities” consists in information to be provided in a dedicated section of the eDesk procedure “National Banking Reporting” as indicated in Chapter 5, section 2, paragraph 2.1 of document “Reporting requirements for credit institutions – Final version” (available in the Guidance section of the Common European reporting part of this page).
The entities are required to submit at least a yearly submission with data reflecting the situation as of 31 December of the reference year by 20 January. This submission is mandatory even in the absence of change during the reference year. In addition, in case of signaletic modifications during the year, entities are required to update their submission.
The instructions on the persons responsible for certain functions and activities are available in the Guidance section below.
Circular CSSF 22/821 published on 25 October 2022 and Circular CSSF 07/325 as amended by Circulars CSSF 21/765 and CSSF 22/827, introduced a self-assessment questionnaire to be filled in on an annual basis by Luxembourg credit institutions, by the Luxembourg branches of credit institutions originating from the EU and outside the EU.
This self-assessment questionnaire comprises various modules that have been designed in a proportionate way and target all institutions listed above. It allows the CSSF to gather sufficient information to implement its risk-based approaches to supervision and to obtain information and assurances as regards institutions’ compliance with key regulatory provisions.
This self-assessment questionnaire, currently applicable, consists of the following modules:
| Module | Description | Level of application | Exemptions |
| Internal governance | Overview of the operational and decision-making structure of the institutions, including the composition of its committees and internal control functions. | Institutions, on an individual basis, excluding their branches, if any. | EU branches established in Luxembourg |
| IT risk | Overview of IT systems and processes, including an assessment of the level of risks and the controls in place. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Credit and counterparty risk | Overview of the organisation, internal governance, methodology, reporting and monitoring of the credit and counterparty risk. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Interest rate risk in the banking book (IRRBB) and credit spread risk arising from non-trading book activities (CSRBB) | Overview of the IRRBB/CSRBB risk controls in place. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Liquidity risk | Overview of liquidity risk documentation, liquid assets, intraday liquidity risk and parent company funding. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Large exposures | Qualitative information on large exposures reported by the institutions. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Related parties | Overview of intragroup exposures, including a description of the purpose of these exposures. In addition, this module shall also provide an overview of services provided to / received from related parties. | Institutions, on an individual basis, including their branches, if any. | EU branches established in Luxembourg |
| Foreign branches | Overview of the foreign branches, including a description of how corporate, commercial and risk group policies are applied in the foreign branches, as well as an overview of the controls in place. | Foreign branches located in another Member State or in a third country. | – EU branches established in Luxembourg
– Institutions that did not have any foreign branches located in another Member State or in a third country at the closure of the financial year. |
| MiFID | Overview of organisational and operational setup with regard to MiFID, as well as a description of investment services and financial instruments offered by the institutions to their clients. This module shall include information on distribution and communication means and on the client database. | Section 1 to 5 of the module: Institutions, on an individual basis, excluding their branches, if any
Section 6 of the module: Institutions, on an individual basis, including their branches, if any |
Institutions that did not provide any investment services or sell or advise in relation to structured deposits during the financial year. |
| PSD 2 – payment services provided | Overview of payment services and a description of the interface through which those payment services are offered to clients. | Institutions, on an individual basis, including their branches, if any. | Institutions that did not provide any payment services during the financial year. |
| PSD 2 – RTS on strong customer authentication and secure communication (SCA & CSC) | Overview of applicability and compliance with the provisions of Commission Delegated Regulation (EU) 2018/389 (RTS on SCA & CSC). | Institutions, on an individual basis, including their branches, if any. | – EU branches established in Luxembourg
– Institutions that did not provide any payment services during the financial year. |
| Depositary bank | Quantitative and qualitative overview of the UCI depositary function and the related services. In addition, this module contains a self-assessment against the main legal requirements. | Institutions, on an individual basis, excluding their branches, if any. | Institutions that do not provide depositary and related services. |
| Climate-related and environmental risks | Information relating to materiality assessment and relevance of climate-related and environmental risks, action plan and alignment with supervisory expectations. | Institutions, on an individual basis, excluding their branches, if any. | EU branches established in Luxembourg |
| Consolidation aspects | Information relating to the oversight of the subsidiaries (organisation, control function, IT systems) and quantitative information on each subsidiary. | Covering all subsidiaries included in the scope of prudential consolidation according to the provisions of Chapter 2 of Title II of Part One of Regulation (EU) No 575/2013. | – EU branches established in Luxembourg
– Institutions that did not consolidate other entities from a prudential perspective at the closure of the relevant financial year. |
| LCRDA Article 23(2) | Declaration according to article 23(2) LCRDA | Institutions, on an individual basis, including their branches, if any. | – EU branches established in Luxembourg
– Significant supervised entities1 |
| Business of UCI Administration | Quantitative and qualitative overview of the UCI administration business & significant information on the activity. Compliance with main legal requirements. | Institutions, on an individual basis, excluding their branches, if any. | Institutions that do not provide UCI administration and related services |
| European Market Infrastructure Regulation (EMIR) | Information relating to regulation (EU) No 648/2012 on OTC derivatives, central counterparties and trade repositories (EMIR) | Institutions, on an individual basis, including their branches, if any. | – EU branches established in Luxembourg
– Branches of non EU credit institutions |
1 Significant supervised entities as defined in Article 2, points (16) of Regulation (EU) No 468/2014 of the European Central Bank (ECB) of 16 April 2014, as amended (the SSM Framework Regulation).
The quarterly reporting on the financial health of the branches’ parent entities is only requested for branches established in Luxembourg by credit institutions established in a third country outside the EU. The scope of the survey is the one of the direct parent which would be required to intervene in the event of a problem at the branch level. These branches have 60 working days after each quarter end to send the file. The definitions of the data points requested are those of Basel III or EBA mapping.
For the purpose of recording the amount of guaranteed deposits, credit institutions governed by Luxembourg law, as well as Post Luxembourg (in respect of its provision of postal financial services) and branches of credit institutions having their registered office in a third country, are required to report on a quarterly basis to the Council for the Protection of Depositors and Investors (CPDI) data relating to guaranteed deposits, at the level of the legal entity, including deposits at the level of branches located in other Member States. Data as at 31 December must also be provided separately for each branch located in another Member State.
As a follow-up to the ESRB recommendations ESRB/2019/3 and ESRB/2016/14 on closing real estate data gaps, the CSSF has launched two data collections to banks. The objective of these data collections is to get an overview of exposures and market practices in financing the real estate market. The data collections will contribute to a better understanding of systemic risks emanating from RE financing in both RRE and CRE segments. Details regarding the definitions of the indicators as well as the required scope are specified in Circular CSSF 18/703 on the introduction of a semi-annual reporting of borrower-related residential real estate indicators for the RRE part and in Circular CSSF 22/803 on the introduction of a semi-annual data collection on lending indicators related to commercial real estate for the CRE part.
Articles 243 (“Traditional securitisation”) and 244 (“Synthetic securitisation”) of the CRR allow a credit institution initiating a securitisation to reflect in its solvency position the mitigating effects of a “significant risk transfer” (SRT) in relation to that securitisation. This recourse must be authorised by the competent authority. To this end, the credit institution shall notify the competent authority of any classical or synthetic securitisation in respect of which it intends to demonstrate a significant risk transfer that is not similar in its structure and in its portfolio composition to transactions previously notified by the institution. This notification is governed by Circular CSSF 15/600 adopted pursuant to EBA Guidelines on Significant Credit Risk Transfer relating to Articles 243 and Article 244 of Regulation 575/2013 (GL/2014/05).
On a biannual basis, credit institutions established in Luxembourg, Luxembourg branches of EU and third country credit institutions that transfer to a credit purchaser a creditor’s rights under a non-performing credit agreement, or the non-performing credit agreement itself, shall inform their competent authority as well as the competent authorities of the host Member State designated in accordance with Article 21(3) of Directive (EU) 2021/2167, of a minimum set of information.
As far as the submission to the CSSF of this set of information is concerned, institutions shall provide the information required under Article 10 of the Law of 15 July 2024 on the transfer of non-performing loans by making use of the Excel template available in the “Form” section below. Before transmitting the file to the CSSF, institutions concerned shall contact reportingbanques@cssf.lu to obtain a secured link to upload the file. Remittance dates for end of June and end of December data have been aligned with semi-annual remittance dates for prudential reporting defined by the EBA (i.e. 11 February and 11 August).
Credit institutions are not required to submit empty forms if no transfer has occurred in the reporting period.
Circular CSSF 19/731 relating to the documents to be submitted to the CSSF and to the European Central Bank on an annual basis lists all the documents that credit institutions must submit on an annual basis. The relevant documents must be addressed either directly to the ECB, or directly to the CSSF, depending on the category to which credit institutions belong:
The legal publication of accounts of credit institutions is governed by the Law of 17 June 1992 relating to the accounts of credit institutions, as amended by the Law of 16 March 2006 relating to the introduction of the IAS/IFRS international accounting standards for credit institutions.
The Law of 16 March 2006 introduces into the Law of 17 June 1992 major amendments in relation to the accounting regime of accounts published by credit institutions. On the one hand, the Law of 16 March 2006 transposes, for the banking sector, the optional regime of the IAS Regulation (Article 5) allowing to extend the scope of application of the IAS standards to unlisted companies and to annual accounts. On the other hand, the Law of 16 March 2006 transposes the Fair Value and Accounts Modernisation Directives, and introduces, among other things, the option to use certain provisions of the IAS/IFRS standards (“IAS options”).
With the exception of listed credit institutions which have to publish their consolidated accounts according to the IAS/IFRS standards pursuant to the mandatory regime of the IAS Regulation (Article 4), the Law of 17 June 1992, as amended, thus permits credit institutions to publish their annual accounts or, where applicable, their consolidated accounts, according to one of the following three accounting regimes:
By virtue of Circular CSSF 08/340, all credit institutions are authorised to apply the IAS/IFRS standards, on individual and consolidated level. The prior agreement of the CSSF is no longer required.
In order to promote a prudent and harmonised application of the “IAS options”, the latter has to be submitted to the prior approval of the CSSF, at individual and consolidated level.
The purpose of Circular CSSF 08/340 is to provide further details on the legal publication of accounts, i.e.:
The circular also provides details in relation to the first application of IAS/IFRS standards to the prudential financial reporting.
Moreover, the circular amends two points of Circular CSSF 01/27 relating to the practical rules on the role of external auditors.
Information to be published under LUX GAAP or LUX GAAP with “IAS options”
Credit institutions publishing their accounts under LUX GAAP and institutions publishing their accounts under LUX GAAP and applying one or several provisions of the IAS/IFRS standards (LUX GAAP with “IAS options”) must apply the document “Information to be published under LUX GAAP or LUX GAAP with “IAS options””. This document provides details relating to the information to be published, the documents to be submitted to the CSSF in the context of the legal publication of accounts and to the publication regime for the institutions concerned.
In order to identify the changes introduced in the amended Law of 17 June 1992 by the Law of 16 March 2006, a marked-up version of the document “Information to be published under LUX GAAP or LUX GAAP with “IAS options” is available below.
Information to be published under IAS/IFRS
Credit institutions publishing their accounts under IAS/IFRS must apply the document “Information to be published under IAS/IFRS”. This document provides details relating to the information to be published, the documents to be submitted to the CSSF in the context of the legal publication of accounts and to the publication regime for the institutions concerned.
Non-financial information
Banks may be required to publish non-financial information in accordance with the article 68bis of the Law of 19 December 2002.