Commission Implementing Regulation (EU) 2025/1338 of 10 July 2025 laying down implementing technical standards for the application of Regulation (EU) 2023/2859 of the European Parliament and of the Council with regard to the functionalities of the European single access point

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2023/2859 of 13 December 2023 of the European Parliament and of the Council establishing a European single access point providing centralised access to publicly available information of relevance to financial services, capital markets and sustainability (1), and in particular Article 7(4), third subparagraph, thereof,

Whereas:

(1) The European Single Access Point (ESAP) referred to in Regulation (EU) 2023/2859 provides stakeholders with easy access to information via an application programming interface (API). Therefore, the API should ensure accessibility of that information, support a variety of formats for that information and incorporate any necessary changes or updates requested by the European Securities and Markets Authority (ESMA). Any changes to the API should be identified in due time, and a clear timetable should be set out for the implementation of those changes. Furthermore, the API should guarantee the basic functionalities of the ESAP for free, notwithstanding ESMA’s obligation to charge fees according to Article 8(2) of Regulation (EU) 2023/2859.

(2) For any processing of personal data in the context of making information accessible on ESAP, ESMA, in its capacity as data controller of ESAP, and the collection bodies should ensure compliance with Regulations (EU) 2016/679 (2) and (EU) 2018/1725 (3) of the European Parliament and of the Council.

(3) To ensure reliable and efficient identification, entities that submit information and the legal persons to which that information relate should be identified using the ISO 17442 Legal Entity Identifier (LEI), having regard to Article 7 and Section A of the Annex of Commission Delegated Regulation (EU) 2016/1437 (4), to Annex VII, rows 11, 12 and 13 of Table 1, and Table 2 of Commission Delegated Regulation (EU) 2019/979 (5), as well as to Article 5 of Commission Delegated Regulation (EU) 2017/590 (6). The LEI should correspond to the entity it is intended to relate to, comply with the ISO 17442 standard and be included in the Global Legal Entity Identifier database maintained by the Central Operating Unit appointed by the Regulatory Oversight Committee of the Global LEI Foundation.

(4) To enable stakeholders to search through the information available on the ESAP in an efficient way, the types of information should be classified so that each information made available on the ESAP corresponds to at least one type of information. To enable users to easily find sustainability information, a specific type of information should be required to identify the management report as referred to in Directive 2004/109/EC of the European Parliament and of the Council (7), since that management report contains the sustainability statement drawn up pursuant to Directive 2013/34/EU of the European Parliament and of the Council (8).

(5) The ESAP should increase opportunities for visibility and growth of small and medium-sized enterprises (SMEs). For SMEs to be easily identifiable, information on the ESAP should be accompanied with the specification of the size category of the entities. To minimise the reporting burden on companies, the ESAP should rely on the existing size categories as set out in the respective Union legislative acts pursuant to which the information is submitted.

(6) The ESAP should enable stakeholders to search information by industry categorisation. Commission Delegated Regulation (EU) 2023/137 (9) provides the main sectors which are sufficiently granular for the classification of non-financial entities in the scope of the ESAP and should therefore be taken into account in the specification of the characterisation of industry sectors. To reflect the granular financial sector industry categories as deemed relevant for the ESAP, additional categories should be included with respect to financial entities.

(7) This Regulation is based on the draft implementing technical standards submitted to the Commission by ESMA, the European Banking Authority and the European Insurance and Occupational Pensions Authority.

(8) ESMA, the European Banking Authority and the European Insurance and Occupational Pensions Authority (‘the ESAs’), have conducted open public consultations on the draft implementing technical standards on which this Regulation is based, analysed the potential related costs and benefits and requested the advice of the Banking Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1093/2010 of the European Parliament and of the Council (10), the Insurance and Reinsurance Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1094/2010 of the European Parliament and of the Council (11), and the Securities and Markets Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council (12).

(9) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 and delivered formal comments on 29 April 2025.

(10) Having regard to Article 23a of Directive 2004/109/EC, Article 11a of Regulation (EU) No 236/2012 of the European Parliament and of the Council (13) and Article 21a of Regulation (EU) 2017/1129 of the European Parliament and of the Council (14), this Regulation should apply at the latest from 10 July 2026,

HAS ADOPTED THIS REGULATION:

Article 1

Characteristics of the data publication API

The API shall:

(a) support the distribution of the information in the format in which it is received;

(b) support the functions of search and download;

(c) allow users to have unrestricted access to all services that are free of charge;

(d) incorporate any changes or updates requested by ESMA to ensure compliance with points (a), (b) and (c).

Article 2

The legal entity identifier

Where required by any of the acts referred to in Article 1(1), point (a), of Regulation (EU) 2023/2859 or by any delegated or implementing act based on those acts for the purpose of the ESAP, entities submitting information to collection bodies and the legal person to which the information relates shall be identified with a legal entity identifier that:

(a) pertains to that person and, as the case may be, to that entity;

(b) is compliant with the ISO 17442 standard; and

(c) is included in the LEI database maintained by the Global Legal Entity Identifier Foundation.

Article 3

The classification of the types of information

Information submitted by the entities to collection bodies shall be classified according to the applicable types of information set out in Table 1 of the Annex.

Article 4

The categories of the size of the entities

Where metadata indicating the size category of an entity is required by any of the acts referred to in Article 1(1), point (a), of Regulation (EU) 2023/2859 or by any delegated or implementing act based on those acts for the purpose of the ESAP, the information shall be accompanied by either of the following:

(a) metadata indicating one of the size categories set out in Table 2 of the Annex where information is submitted to collection bodies pursuant to one of the Union legislative acts included in that Table;

(b) metadata indicating the size category ‘other size’ where information is submitted to collection bodies pursuant to Union legislative acts other than those included in Table 2 of the Annex.

Article 5

The characterisation of industry sectors

Where metadata indicating the industry sector of the economic activities is required by any of the acts referred to in Article 1(1), point (a), of Regulation (EU) 2023/2859 or by any delegated or implementing act based on those acts for the purpose of the ESAP:

(a) entities falling under one or more categories set out in Table 3 of the Annex shall be classified according to that table;

(b) other entities shall be categorised on the basis of one or more of the main sections of Statistical Classification of economics activities in the European Community (NACE), as defined in Delegated Regulation (EU) 2023/137.

Article 6

Review

The ESAs, through the Joint Committee, shall re-assess the technical standards laid down in this Regulation relating to the legal entity identifier, having regard to information submitted by entities to collection bodies. The ESAs shall submit a report to the Commission by 31 December 2026, accompanied, where appropriate, with proposed draft amendments to this Regulation.

Article 7

Entry into force and application

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

It shall apply from 10 July 2026.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 10 July 2025.

For the Commission The President Ursula VON DER LEYEN

(1) OJ L, 2023/2859, 20.12.2023, ELI: http://data.europa.eu/eli/reg/2023/2859/oj.

(2) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1, ELI: http://data.europa.eu/eli/reg/2016/679/oj).

(3) Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39, ELI: http://data.europa.eu/eli/reg/2018/1725/oj).

(4) Commission Delegated Regulation (EU) 2016/1437 of 19 May 2016 supplementing Directive 2004/109/EC of the European Parliament and of the Council with regard to regulatory technical standards on access to regulated information at Union level (OJ L 234, 31.8.2016, p. 1, ELI: http://data.europa.eu/eli/reg_del/2016/1437/oj).

(5) Commission Delegated Regulation (EU) 2019/979 of 14 March 2019 supplementing Regulation (EU) 2017/1129 of the European Parliament and of the Council with regard to regulatory technical standards on key financial information in the summary of a prospectus, the publication and classification of prospectuses, advertisements for securities, supplements to a prospectus, and the notification portal, and repealing Commission Delegated Regulation (EU) No 382/2014 and Commission Delegated Regulation (EU) 2016/301 (OJ L 166, 21.6.2019, p. 1, ELI: http://data.europa.eu/eli/reg/2019/979/oj).

(6) Commission Delegated Regulation (EU) 2017/590 of 28 July 2016 supplementing Regulation (EU) No 600/2014 of the European Parliament and of the Council with regard to regulatory technical standards for the reporting of transactions to competent authorities (OJ L 87, 31.3.2017, p. 449, ELI: http://data.europa.eu/eli/reg_del/2017/590/oj).

(7) Directive 2004/109/EC of the European Parliament and of the Council of 15 December 2004 on the harmonisation of transparency requirements in relation to information about issuers whose securities are admitted to trading on a regulated market and amending Directive 2001/34/EC (OJ L 390, 31.12.2004, p. 38, ELI: http://data.europa.eu/eli/dir/2004/109/oj).

(8) Directive 2013/34/EU of the European Parliament and of the Council of 26 June 2013 on the annual financial statements, consolidated financial statements and related reports of certain types of undertakings, amending Directive 2006/43/EC of the European Parliament and of the Council and repealing Council Directives 78/660/EEC and 83/349/EEC (OJ L 182, 29.6.2013, p. 19, ELI: http://data.europa.eu/eli/dir/2013/34/oj).

(9) Commission Delegated Regulation (EU) 2023/137 of 10 October 2022 amending Regulation (EC) No 1893/2006 of the European Parliament and of the Council establishing the statistical classification of economic activities NACE Revision 2 (OJ L 19, 20.1.2023, p. 5, ELI: http://data.europa.eu/eli/reg_del/2023/137/oj).

(10) Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ L 331, 15.12.2010, p. 12, ELI: http://data.europa.eu/eli/reg/2010/1093/oj).

(11) Regulation (EU) No 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/79/EC (OJ L 331, 15.12.2010, p. 48, ELI: http://data.europa.eu/eli/reg/2010/1094/oj).

(12) Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/77/EC (OJ L 331, 15.12.2010, p. 84, ELI: http://data.europa.eu/eli/reg/2010/1095/oj).

(13) Regulation (EU) No 236/2012 of the European Parliament and of the Council of 14 March 2012 on short selling and certain aspects of credit default swaps (OJ L 86, 24.3.2012, p. 1, ELI: http://data.europa.eu/eli/reg/2012/236/oj).

(14) Regulation (EU) 2017/1129 of the European Parliament and of the Council of 14 June 2017 on the prospectus to be published when securities are offered to the public or admitted to trading on a regulated market, and repealing Directive 2003/71/EC (OJ L 168, 30.6.2017, p. 12, ELI: http://data.europa.eu/eli/reg/2017/1129/oj).