European Securities and Markets Authority (ESMA)

Which entities does ESMA supervise directly?

Not investment firms or fund managers. Those are supervised nationally. ESMA's direct population is market infrastructure: credit rating agencies, trade repositories under EMIR and SFTR, securitisation repositories, critical and third-country benchmark administrators, data reporting service providers, and third-country central counterparties through the recognition regime.

Three additions in 2026 show how that population grows:

• EuroCTP B.V. was authorised as the consolidated tape provider for shares and ETFs on 27 July 2026, with a transition period running to 30 September 2026.
• The Clearing Corporation of India was recognised as a Tier 1 third-country CCP on 1 July 2026.
• ESMA published the register of external reviewers under the EU Green Bond Regulation on 22 June 2026, a new registration category.

What does ESMA publish, and how often?

Consultation papers, final reports, guidelines, Q&As, public statements, supervisory briefings, peer reviews, an annual work programme and an annual report, plus the Trends, Risks and Vulnerabilities report. Q&As are issued in batches on a rolling basis: a batch on 10 July 2026 covered the ESG Ratings Regulation, MiCA and MiFIR secondary markets. A newsletter, Spotlight on Markets, appears periodically; the June to July edition was published 31 July 2026. ESMA also runs the reference data systems FIRDS and FITRS and, from 2026, the first-phase data collection for the European Single Access Point.

What does ESMA's enforcement look like?

ESMA can fine the entities it supervises directly, and does so rarely. It fined Moody's Deutschland GmbH €2,145,000 (the public notice on ESMA's sanctions page is dated 30 June 2026, and the decision was announced on 2 July 2026) for four breaches of the Credit Rating Agencies Regulation, concerning incomplete and inaccurate data reported to ESMA's central platform and inadequate internal controls. ESMA characterised the breaches as negligent, and no published credit rating was affected.

For a firm supervised nationally, ESMA's enforcement record is not the relevant signal. The relevant one is its convergence work: peer reviews and follow-up reports, such as the 20 July 2026 review of cross-border investment services supervision across six member states, are what change how the AFM or BaFin actually supervises you.

What changes for a mid-sized institution?

Two mechanisms. Fund managers below the AIFMD thresholds operate under a lighter registration regime rather than full authorisation. And ESMA's current reporting workstream is explicitly aimed at reducing transaction-reporting burden: its July 2026 newsletter frames the simplification package in terms of annual industry savings. Neither changes what applies to you; both change how much of it you have to file.