Establishment of reports on operational risk of credit institutions and consolidation groups of credit institutions

This Decree establishes the requirements for the content and form of reports on operational risk, and the due dates and procedure for submission of the reports to the Financial Supervision Authority for the purposes of the supervisory review and evaluation process.

(1) The provisions of this Decree shall be applied to all credit institutions operating in Estonia.

(2) Credit institutions shall prepare and submit the reports specified in section 3 of the Decree only on a consolidated basis. Credit institutions that do not serve as parent companies or as subsidiaries of a financial holding company or a mixed financial holding company that serves as a parent company in Estonia, shall prepare and submit the reports specified in section 3 of the Decree only on a solo basis.

A credit institution shall prepare the following reports

1) “Report on operational risk loss events and incidents" in accordance with Appendix 1;

2) "Report on key indicators of operational risk" in accordance with Appendix 2;

3) "Report on legal actions" in accordance with Appendix 3.

(1) The reports shall be prepared in Estonian.

(2) The figures shall be presented in euros, rounded off to integers.

(3) The sums fixed in foreign currencies shall be converted into euros at the official daily exchange rate of the European Central Bank as on the last banking day of the reporting period, unless otherwise provided for in this Decree.

(4) Data shall be reported as at the end of the reporting period, unless otherwise provided for in this Decree.

(1) The reporting period of the reports specified in section 3 of this Decree shall be the quarter.

(2) The reports specified in section 3 of this Decree shall be submitted during the month following the reporting period.

(1) The reports are submitted to the Financial Supervision Authority electronically as documents in the XML (eXtensible Markup Language) format pursuant to the Eesti Pank Governor’s Decree No 4 of 29 May 2018 “Requirements for the electronic submission of reports” (RT I, 05.06.2018, 1).

[RT I, 19.06.2018, 1 – entry into force 01.01.2019]

(2) In case the report submitted to the Financial Supervision Authority contains any errors, the credit institution submitting the report shall be obliged to submit a corrected version of the report.

(3) An empty report shall be submitted if no data is available with regard to the report.

(4) The reports shall be coded as follows

1) "Report on operational risk loss events and incidents": 672;

2) "Report on key indicators of operational risk": 673;

3) "Report on legal actions": 674.

(1) The country code shall be established based on the two-digit code table of the ISO 3166-1 international standard for countries and territories, and presented in capital letters in the reports.

[RT I, 27.05.2025, 3 - entry into force 01.01.2026]

(2) The date format shall be established based on the ISO 8601-1 international standard in the reports.

[RT I, 27.05.2025, 3 - entry into force 01.01.2026]

This Decree shall be applied to the preparation and submission of reports on reporting periods commencing on or after 1 January 2014.