Official Journal EN
of the European Union L series
2026/956 21.5.2026
DECISION OF THE EEA JOINT COMMITTEENo 36/2026
of 6 February 2026
amending Annex IX (Financial services) to the EEA Agreement [2026/956]
THE EEA JOINT COMMITTEE,
Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98
thereof,
Whereas:
(1) Commission Implementing Regulation...
Official Journal EN of the European Union L series 2026/956 21.5.2026 DECISION OF THE EEA JOINT COMMITTEENo 36/2026 of 6 February 2026 amending Annex IX (Financial services) to the EEA Agreement [2026/956] THE EEA JOINT COMMITTEE, Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98 thereof,
Whereas:
(1) Commission Implementing Regulation (EU) 2025/302 of 23 October 2024 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat(1)is to be incorporated into the EEA Agreement.
(2) Annex IX to the EEA Agreement should therefore be amended accordingly,
HAS ADOPTED THIS DECISION:
Article 1 The following point is inserted after point 31qk (Commission Delegated Regulation (EU) 2025/1190) of Annex IX to the
EEA Agreement: ‘31ql. 32025 R 0302: Commission Implementing Regulation (EU) 2025/302 of 23 October 2024 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat (OJ L, 2025/302, 20.2.2025).’ Article 2 The text of Implementing Regulation (EU) 2025/302 in the Icelandic and Norwegian languages, to be published in the EEA Supplement to the Official Journal of the European Union, shall be authentic.
Article 3 This Decision shall enter into force on 7 February 2026, provided that all the notifications under Article 103(1) of the EEA Agreement have been made(*).
(1) OJ L, 2025/302, 20.2.2025, ELI: http://data.europa.eu/eli/reg_impl/2025/302/oj. (*) No constitutional requirements indicated.
ELI: http://data.europa.eu/eli/dec/2026/956/oj 1/2EN OJ L, 21.5.2026 Article 4 This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union.
Done at Brussels, 6 February 2026.
For the EEA Joint Committee The President Nicolas VON LINGEN 2/2 ELI: http://data.europa.eu/eli/dec/2026/956/oj