TITLE ISUBJECT MATTER, SCOPE AND DEFINITIONS

Article 1Subject matterThis Regulation introduces a common regulatory approach to enhance the integrity, transparency, comparability where possible, responsibility, reliability, good governance and independence of ESG rating activities, thereby contributing to the transparency and quality of ESG ratings and to the sustainable finance agenda of the Union. It aims to contribute to the smooth functioning of the internal market, while achieving a high level of consumer and investor protection and preventing greenwashing and other types of misinformation, including social washing, by introducing transparency requirements related to ESG ratings and rules on the organisation and conduct of ESG rating providers.

Article 2Scope1.This Regulation applies to ESG ratings issued by ESG rating providers operating in the Union.ESG rating providers are considered to be operating in the Union in the following cases:(a)for ESG rating providers established in the Union:(i)when they issue and publish their ESG ratings on their website or through other means; or(ii)when they issue and distribute their ESG ratings by subscription or other contractual relationships to regulated financial undertakings in the Union, to undertakings that fall within the scope of Directive 2013/34/EU, to undertakings that fall within the scope of Directive 2004/109/EC, or to Union institutions, bodies, offices and agencies or Member State public authorities;(b)for ESG rating providers established outside the Union, when they issue and distribute their ESG ratings by subscription or other contractual relationships to regulated financial undertakings in the Union, to undertakings that fall within the scope of Directive 2013/34/EU, to undertakings that fall within the scope of Directive 2004/109/EC, or to Union institutions, bodies, offices and agencies or Member State public authorities.2.This Regulation does not apply to any of the following:(a)private ESG ratings that are not intended for public disclosure or for distribution;(b)ESG ratings issued by regulated financial undertakings in the Union that are used exclusively for internal purposes or for providing in-house or intragroup financial services or products;(c)ESG ratings issued by regulated financial undertakings in the Union that:(i)are incorporated in a product or a service, where such products or services are already regulated under Union law, including under Regulation (EC) No 883/2004 of the European Parliament and of the CouncilRegulation (EC) No 883/2004 of the European Parliament and of the Council of 29 April 2004 on the coordination of social security systems (OJ L 166, 30.4.2004, p. 1)., Regulation (EU) 2019/2088, Directives 2013/36/EUDirective 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions, amending Directive 2002/87/EC and repealing Directives 2006/48/EC and 2006/49/EC (OJ L 176, 27.6.2013, p. 338)., 2014/65/EU, 2009/138/ECDirective 2009/138/EC of the European Parliament and of the Council of 25 November 2009 on the taking-up and pursuit of the business of Insurance and Reinsurance (Solvency II) (OJ L 335, 17.12.2009, p. 1)., 2009/65/ECDirective 2009/65/EC of the European Parliament and of the Council of 13 July 2009 on the coordination of laws, regulations and administrative provisions relating to undertakings for collective investment in transferable securities (UCITS) (OJ L 302, 17.11.2009, p. 32)., 2011/61/EUDirective 2011/61/EU of the European Parliament and of the Council of 8 June 2011 on Alternative Investment Fund Managers and amending Directives 2003/41/EC and 2009/65/EC and Regulations (EC) No 1060/2009 and (EU) No 1095/2010 (OJ L 174, 1.7.2011, p. 1). and (EU) 2016/2341Directive (EU) 2016/2341 of the European Parliament and of the Council of 14 December 2016 on the activities and supervision of institutions for occupational retirement provision (IORPs) (OJ L 354, 23.12.2016, p. 37). of the European Parliament and of the Council and Regulations (EU) 2020/1503Regulation (EU) 2020/1503 of the European Parliament and of the Council of 7 October 2020 on European crowdfunding service providers for business, and amending Regulation (EU) 2017/1129 and Directive (EU) 2019/1937 (OJ L 347, 20.10.2020, p. 1)., (EU) 2023/1114Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets, and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937 (OJ L 150, 9.6.2023, p. 40). and (EU) 2016/1011 of the European Parliament and of the Council; and(ii)are disclosed to a third party.In the situations covered by the first subparagraph of this point, where a regulated financial undertaking in the Union discloses an ESG rating to third parties as part of its marketing communications, it shall include on its website the same information as that required by point 1 of Annex III to this Regulation and it shall disclose in those marketing communications a link to those website disclosures, except where it is subject to Article 13(3) of Regulation (EU) 2019/2088.Competent authorities designated in accordance with the sectoral legislative acts referred to in the first subparagraph of this point shall monitor compliance by regulated financial undertakings in the Union with the requirements of the first subparagraph of this point, in accordance with the powers granted by those sectoral legislative acts;(d)ESG ratings issued by ESG rating providers established outside the Union that are not authorised or recognised under Title II and that meet the following conditions:(i)the ESG rating is distributed at the own exclusive initiative of the user of the ESG rating established in the Union without any prior contact, solicitation, promotion, advertisement or any other initiative by the ESG rating provider, or by any third party on behalf of the provider; an ESG rating distributed in the Union by a provider established outside the Union whose market share in the Union for its ESG rating activities becomes substantial or that has a website in at least one of the official languages of the Union, which is a language that is not customary in the sphere of international finance, shall not be considered to be distributed at the own exclusive initiative of the user of ESG rating.The own exclusive initiative of a user of ESG rating as referred to in the first subparagraph of this point shall not entitle an ESG rating provider established outside the Union to distribute ESG ratings to that user in a recurrent manner, nor to distribute ESG ratings to any other user of ESG ratings in the Union;(ii)there is no substitute for the ratings offered by any ESG rating provider authorised under this Regulation;(e)the publication or distribution of data on environmental, social and human rights, and governance factors;(f)credit ratings issued pursuant to Regulation (EC) No 1060/2009, and any ESG-related scores or assessments that are produced or published as part of the methodologies for credit ratings or as an input or output of the creditworthiness assessment;(g)products or services that incorporate an element of an ESG rating, including investment research as laid down in Directive 2014/65/EU;(h)external reviews of European Green Bonds, as provided for in Regulation (EU) 2023/2631;(i)external reviews or second-party opinions on bonds marketed as environmentally sustainable, sustainability-linked bonds, and bonds, loans and other types of debt instruments marketed as sustainable, to the extent that such external reviews and second-party opinions do not contain ESG ratings issued by the external reviewer or the second-party opinion provider;(j)ESG ratings issued by Union institutions, bodies, offices and agencies or Member State public authorities where such ratings are not published or distributed for commercial purposes;(k)ESG ratings issued by an authorised ESG rating provider where such ratings are published or distributed by a third party;(l)ESG ratings issued by members of the European System of Central Banks where such ratings are not published or distributed for commercial purposes;(m)mandatory disclosures pursuant to Articles 6, 8, 9, 10, 11 and 13 of Regulation (EU) 2019/2088;(n)disclosures pursuant to Articles 5, 6 and 8 of Regulation (EU) 2020/852;(o)ESG ratings developed exclusively for accreditation or certification processes, which do not target investment analysis, financial analysis, investment decision-making or financial decision-making;(p)labelling activities provided that the labels granted to the relevant entities, financial instruments or financial products do not involve the disclosure of an ESG rating;(q)ESG ratings published or distributed by non-profit organisations for non-commercial purposes.By way of derogation from the first subparagraph, point (q), where non-profit organisations charge rated items or issuers of rated items to report data or to get rated through their platform, or where they charge users of ESG ratings to access any information on ESG ratings, they shall be subject to the requirements of this Regulation.3.ESMA, the European Supervisory Authority (European Banking Authority) (EBA) established by Regulation (EU) No 1093/2010 of the European Parliament and of the CouncilRegulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ L 331, 15.12.2010, p. 12)., and the European Supervisory Authority (European Insurance and Occupational Pensions Authority) (EIOPA) established by Regulation (EU) No 1094/2010 of the European Parliament and of the CouncilRegulation (EU) No 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/79/EC (OJ L 331, 15.12.2010, p. 48). (known collectively as "European Supervisory Authorities" or "ESAs") shall, through the Joint Committee, develop draft regulatory technical standards to specify the details of the presentation and content of the information to be disclosed pursuant to paragraph 2, first subparagraph, point (c), second subparagraph, taking into account the various types of financial products, their characteristics and the differences between them, and the need to avoid duplication of information already published in accordance with applicable regulatory requirements.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph, in accordance with Articles 10 to 14 of Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010.

Article 3DefinitionsFor the purposes of this Regulation, the following definitions apply:(1)"ESG rating" means an opinion or a score, or a combination of both, regarding a rated item’s profile or characteristics with regard to environmental, social and human rights, or governance factors, or regarding a rated item’s exposure to risks or impact on environmental, social and human rights, or governance factors, that is based on both an established methodology and a defined ranking system of rating categories, irrespective of whether such ESG rating is labelled as "ESG rating", "ESG opinion" or "ESG score";(2)"ESG opinion" means an ESG assessment that is based on a rule-based methodology and defined ranking system of rating categories, involving directly a rating analyst in the rating process;(3)"ESG score" means an ESG measure derived from data, using a rule-based methodology, and based only on a pre-established statistical or algorithmic system or model, without any additional substantial analytical input from a rating analyst;(4)"ESG rating provider" means a legal person whose activities include the issuance, and the publication or distribution, of ESG ratings on a professional basis;(5)"regulated financial undertaking in the Union" means an undertaking, regardless of its legal form, that is:(a)a credit institution as defined in Article 4(1), point (1), of Regulation (EU) No 575/2013 of the European Parliament and of the CouncilRegulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and amending Regulation (EU) No 648/2012 (OJ L 176, 27.6.2013, p. 1).;(b)an investment firm as defined in Article 4(1), point (1), of Directive 2014/65/EU;(c)an AIFM as defined in Article 4(1), point (b), of Directive 2011/61/EU, including a manager of a qualifying venture capital fund as defined in Article 3, point (c), of Regulation (EU) No 345/2013 of the European Parliament and of the CouncilRegulation (EU) No 345/2013 of the European Parliament and of the Council of 17 April 2013 on European venture capital funds (OJ L 115, 25.4.2013, p. 1)., a manager of a qualifying social entrepreneurship fund as defined in Article 3, point (c), of Regulation (EU) No 346/2013 of the European Parliament and of the CouncilRegulation (EU) No 346/2013 of the European Parliament and of the Council of 17 April 2013 on European social entrepreneurship funds (OJ L 115, 25.4.2013, p. 18). and a manager of the ELTIF as defined in Article 2, point (12), of Regulation (EU) 2015/760 of the European Parliament and of the CouncilRegulation (EU) 2015/760 of the European Parliament and of the Council of 29 April 2015 on European long-term investment funds (OJ L 123, 19.5.2015, p. 98).;(d)a management company as defined in Article 2(1), point (b), of Directive 2009/65/EC;(e)an insurance undertaking as defined in Article 13, point (1), of Directive 2009/138/EC;(f)a reinsurance undertaking as defined in Article 13, point (4), of Directive 2009/138/EC;(g)an institution for occupational retirement provision as defined in Article 6, point (1), of Directive (EU) 2016/2341;(h)a pension institution operating pension schemes which are considered to be social security schemes covered by Regulations (EC) No 883/2004 and (EC) No 987/2009Regulation (EC) No 987/2009 of the European Parliament and of the Council of 16 September 2009 laying down the procedure for implementing Regulation (EC) No 883/2004 on the coordination of social security systems (OJ L 284, 30.10.2009, p. 1). of the European Parliament and of the Council, and any legal entity set up for the purpose of investment of such social security schemes;(i)an alternative investment fund, as defined in Article 4(1), point (a), of Directive 2011/61/EU, supervised under the applicable national law;(j)a UCITS as defined in Article 1(2) of Directive 2009/65/EC;(k)a central counterparty as defined in Article 2, point (1), of Regulation (EU) No 648/2012 of the European Parliament and of the CouncilRegulation (EU) No 648/2012 of the European Parliament and of the Council of 4 July 2012 on OTC derivatives, central counterparties and trade repositories (OJ L 201, 27.7.2012, p. 1).;(l)a central securities depository as defined in Article 2(1), point (1), of Regulation (EU) No 909/2014 of the European Parliament and of the CouncilRegulation (EU) No 909/2014 of the European Parliament and of the Council of 23 July 2014 on improving securities settlement in the European Union and on central securities depositories and amending Directives 98/26/EC and 2014/65/EU and Regulation (EU) No 236/2012 (OJ L 257, 28.8.2014, p. 1).;(m)an insurance or reinsurance special purpose vehicle authorised in accordance with Article 211 of Directive 2009/138/EC;(n)a securitisation special purpose entity as defined in Article 2, point (2), of Regulation (EU) 2017/2402 of the European Parliament and of the CouncilRegulation (EU) 2017/2402 of the European Parliament and of the Council of 12 December 2017 laying down a general framework for securitisation and creating a specific framework for simple, transparent and standardised securitisation, and amending Directives 2009/65/EC, 2009/138/EC and 2011/61/EU and Regulations (EC) No 1060/2009 and (EU) No 648/2012 (OJ L 347, 28.12.2017, p. 35).;(o)an insurance holding company as defined in Article 212(1), point (f), of Directive 2009/138/EC or a mixed financial holding company as defined in Article 212(1), point (h), of Directive 2009/138/EC, which is part of an insurance group that is subject to supervision at the level of the group pursuant to Article 213 of that Directive and which is not exempted from group supervision pursuant to Article 214(2) of that Directive;(p)a financial holding company as defined in Article 4(1), point (20), of Regulation (EU) No 575/2013;(q)a payment institution as defined in Article 4, point (4), of Directive (EU) 2015/2366 of the European Parliament and of the CouncilDirective (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC (OJ L 337, 23.12.2015, p. 35).;(r)an electronic money institution as defined in Article 2, point (1), of Directive 2009/110/EC of the European Parliament and of the CouncilDirective 2009/110/EC of the European Parliament and of the Council of 16 September 2009 on the taking up, pursuit and prudential supervision of the business of electronic money institutions amending Directives 2005/60/EC and 2006/48/EC and repealing Directive 2000/46/EC (OJ L 267, 10.10.2009, p. 7).;(s)a crowdfunding service provider as defined in Article 2(1), point (e), of Regulation (EU) 2020/1503;(t)a crypto-asset service provider as defined in Article 3(1), point (15), of Regulation (EU) 2023/1114 when performing one or more crypto-asset services as defined in Article 3(1), point (16), of Regulation (EU) 2023/1114;(u)a trade repository as defined in Article 2, point (2), of Regulation (EU) No 648/2012;(v)a securitisation repository as defined in Article 2, point (23), of Regulation (EU) 2017/2402;(w)an administrator of benchmarks as defined in Article 3(1), point (6), of Regulation (EU) 2016/1011;(x)a credit rating agency as defined in Article 3(1), point (b), of Regulation (EC) No 1060/2009;(6)"rating analyst" means a person who performs analytical functions for the purpose of issuing ESG ratings;(7)"rated item" means a legal person, a financial instrument, a financial product, a public authority or a body governed by public law which is explicitly or implicitly rated in the ESG rating, irrespective of whether such rating has been requested and irrespective of whether the legal person, public authority or body governed by public law has provided information for that ESG rating;(8)"financial instrument" means any of the instruments listed in Section C of Annex I to Directive 2014/65/EU;(9)"user of ESG ratings" means a natural or legal person, a public authority, an agency or other body governed by public law, to which an ESG rating is distributed by subscription or other contractual relationships;(10)"competent authorities" means the authorities designated by each Member State in accordance with Article 30 of this Regulation;(11)"management body" means an ESG rating provider’s body or bodies, which are appointed in accordance with national law, which are empowered to set the ESG rating provider’s strategy, objectives and overall direction, which oversee and monitor management decision-making in the ESG rating provider, and which include the persons who effectively direct the business of the ESG rating provider;(12)"senior management" means the person or persons who effectively direct the business of the ESG rating provider and the member or members of the ESG rating provider’s administrative or supervisory board;(13)"group of ESG rating providers" means a group of undertakings established in the Union consisting of a parent undertaking and its subsidiary undertakings within the meaning of Article 2 of Directive 2013/34/EU, and undertakings linked to each other by a relationship, whose activities include the provision of ESG ratings.

TITLE IIPROVISION OF ESG RATINGS IN THE UNION

Article 4Requirements to operate in the UnionAny legal person that wishes to operate as an ESG rating provider in the Union shall be subject to one of the following:(a)an authorisation issued by ESMA as referred to in Article 6;(b)an equivalence decision as referred to in Article 10 and fulfilment of the conditions referred to in that Article;(c)an authorisation for endorsement as referred to in Article 11;(d)a recognition as referred to in Article 12.

Article 5Temporary regime for small ESG rating providers1.By way of derogation from Article 4, an ESG rating provider categorised as a small undertaking or as a small group within the meaning of Article 3(2), first subparagraph, or Article 3(5), first subparagraph, respectively, of Directive 2013/34/EU (the "small ESG rating provider") that is established in the Union and wishes to operate in the Union shall only be subject to Article 15(1), (5) and (7), Articles 23 and 24 and Articles 32 to 37 of this Regulation, provided that it:(a)notifies ESMA of its intention to operate in the Union; and(b)has been registered by ESMA before it starts operating in the Union.2.Within 90 working days of receipt of the notification referred to in paragraph 1, point (a), ESMA shall decide whether to register the notifier as a small ESG rating provider. ESMA shall inform the notifier of its decision within five working days thereof.3.Where an ESG rating provider referred to in paragraph 1 of this Article ceases to be categorised as a small ESG rating provider, or three years after its registration in accordance with paragraph 1, point (b), of this Article, whichever occurs first, the ESG rating provider shall become subject to all provisions of this Regulation and shall within six months apply for authorisation to operate in the Union pursuant to Chapter 1 of this Title.4.The ESG rating providers referred to in paragraph 1 of this Article may choose to opt in to this Regulation by applying to ESMA for authorisation pursuant to Article 6. Where ESG rating providers choose to opt in, this Regulation shall become applicable to them in its entirety.

CHAPTER 1Authorisation of ESG rating providers established in the Union to operate in the Union

Article 6Application for authorisation to operate in the Union1.Legal persons established in the Union that wish to operate in the Union pursuant to Article 2(1), point (a), shall apply to ESMA for authorisation.2.An application for authorisation as referred to in paragraph 1 shall contain all of the information listed in Annex I to this Regulation and shall be submitted in any of the official languages of the Union. Council Regulation No 1Council Regulation No 1 determining the languages to be used by the European Economic Community (OJ 17, 6.10.1958, p. 385). shall apply mutatis mutandis to any other communication between ESMA and ESG rating providers and their staff.3.ESMA shall develop draft regulatory technical standards to specify further the information listed in Annex I.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 2 October 2025.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Articles 10 to 14 of Regulation (EU) No 1095/2010.4.An authorised ESG rating provider shall comply at all times with the requirements under which the initial authorisation was granted.5.ESG rating providers shall notify ESMA of any material changes to the circumstances under which the initial authorisation was granted, including any opening or closing of a branch within the Union, without undue delay.

Article 7Examination by ESMA of the application for authorisation to operate in the Union as an ESG rating provider1.Within 25 working days of receipt of an application as referred to in Article 6(2), ESMA shall assess whether the application is complete. Where the application is not complete, ESMA shall set a deadline by which the applicant is to provide any missing information.2.Once it assesses that an application is complete, ESMA shall notify the applicant thereof.3.Within 90 working days of the notification referred to in paragraph 2 of this Article, ESMA shall adopt a fully reasoned decision, as referred to in Article 8(1), to grant or refuse authorisation to operate as an ESG rating provider in the Union.4.ESMA may extend the period referred to in paragraph 3 of this Article to 120 working days, in particular where the applicant:(a)envisages endorsing ESG ratings as referred to in Article 11;(b)envisages using outsourcing; or(c)requests exemption from compliance in accordance with Article 22.5.The decision adopted by ESMA pursuant to paragraph 3 shall take effect on the fifth working day following its adoption.6.If the applicant does not provide any requested missing information by the expiry of the deadline referred to in paragraph 1, ESMA shall reject the application.If no decision is adopted by ESMA within the period referred to in paragraph 3 or 4, the application shall be deemed rejected.

Article 8Decision to grant or refuse authorisation to operate in the Union and notification of that decision1.ESMA shall adopt a fully reasoned decision authorising an applicant to operate in the Union as an ESG rating provider where it concludes from its examination of the application referred to in Article 7 that the applicant complies with the requirements for the provision of ESG ratings set out in this Regulation.Where ESMA, after examining the application, concludes that the applicant does not meet the requirements for the provision of ESG ratings set out in this Regulation, it shall adopt a fully reasoned decision refusing that authorisation.2.ESMA shall inform the applicant within five working days of the decision referred to in paragraph 1.3.ESMA shall inform the Commission, EBA and EIOPA of any decision taken pursuant to paragraph 1.4.The authorisation shall be effective for the entire territory of the Union.

Article 9Suspension or withdrawal of authorisation1.ESMA shall adopt a decision suspending or withdrawing the authorisation of an ESG rating provider referred to in Article 8(1), first subparagraph, where the ESG rating provider:(a)has expressly renounced the authorisation or has provided no ESG ratings for the preceding 12 months;(b)has obtained its authorisation by making false statements or by any other irregular means;(c)no longer meets the conditions under which it was authorised; or(d)has seriously or repeatedly infringed this Regulation.2.ESMA shall inform the ESG rating provider without undue delay of any decision taken pursuant to paragraph 1. The decision on the withdrawal or suspension of authorisation shall take immediate effect throughout the Union.3.ESMA shall also inform the competent authorities, the Commission, EBA and EIOPA of any decision taken pursuant to paragraph 1.

CHAPTER 2Equivalence, endorsement and recognition of ESG rating providers established outside the Union to operate in the Union

Article 10Equivalence regime1.An ESG rating provider established outside the Union that wishes to operate in the Union pursuant to Article 2(1), point (b), shall only be able to do so where it is included in the register referred to in Article 14 and provided that all of the following conditions are met:(a)the ESG rating provider established outside the Union is authorised or registered as an ESG rating provider in the third country concerned and is subject to supervision in that third country;(b)the ESG rating provider established outside the Union has notified ESMA that it wishes to operate in the Union and has submitted to ESMA proof of its authorisation or registration as an ESG rating provider, the documents required for such authorisation or registration in the third country concerned, as well as the name of the third-country competent authority responsible for its supervision, and has received confirmation from ESMA as regards the completeness of the information provided;(c)the Commission has adopted an equivalence decision pursuant to paragraph 2;(d)the cooperation arrangements referred to in paragraph 4 are operational.2.The Commission may adopt an equivalence decision by means of an implementing act stating that the legal framework and supervisory practice of a third country ensure that:(a)ESG rating providers authorised or registered in that third country comply with binding requirements which are equivalent to the requirements of this Regulation;(b)compliance with the binding requirements referred to in point (a) is subject to effective supervision and enforcement on an ongoing basis in that third country.Such an implementing act shall be adopted in accordance with the examination procedure referred to in Article 48.3.The Commission may adopt a delegated act in accordance with Article 47 to specify the conditions referred to in paragraph 2, first subparagraph, of this Article. The Commission may subject the application of the implementing act referred to in paragraph 2 of this Article to:(a)the effective fulfilment on an ongoing basis by the third country concerned of any condition set out in that implementing act that aims to ensure equivalent supervisory and regulatory standards;(b)the ability of ESMA to effectively exercise the monitoring responsibilities referred to in Article 33 of Regulation (EU) No 1095/2010.4.ESMA shall establish cooperation arrangements with the third-country competent authorities whose legal framework and supervisory practices have been recognised as equivalent in accordance with paragraph 2. Such arrangements shall specify at least the following:(a)the mechanism for exchanging information on a regular and ad hoc basis between ESMA and the third-country competent authorities concerned, including access to all relevant information requested by ESMA regarding the ESG rating provider authorised or registered in that third country;(b)the mechanism for prompt notification to ESMA where a third-country competent authority deems that the ESG rating provider authorised or registered in that third country and supervised by that third-country competent authority is breaching the conditions of its authorisation or registration, or other provisions of national law in that third country;(c)the procedures concerning the coordination of supervisory activities, including on-site inspections;(d)the mechanism for prompt notification to ESMA where a third-country competent authority takes any regulatory or supervisory actions in relation to the ESG rating provider authorised or registered in that third country, including any change that might have an impact on the ESG rating provider’s continued compliance with applicable laws and regulations;(e)the mechanism for prompt notification to the third-country competent authority where ESMA issues a public notice in accordance with Article 35 to the ESG rating provider authorised or registered in that third country.For the purpose of the first subparagraph of this paragraph, where ESMA is informed that an ESG rating provider established outside the Union no longer meets the conditions to be authorised or registered in its country of authorisation or registration, ESMA shall remove it from the register referred to in Article 14.5.For the purpose of paragraph 1, point (b), ESMA shall assess whether the information is complete within 20 working days of its receipt. If ESMA deems that the information is not complete, ESMA shall set a deadline by which the ESG rating provider is to provide any missing information. Once it assesses that a submission is complete, ESMA shall inform the ESG rating provider of the outcome of the process no later than 60 working days from the date of the initial notification.

Article 11Endorsement of ESG ratings provided by ESG rating providers established outside the Union1.An ESG rating provider established in the Union and authorised in accordance with Article 8 may endorse ESG ratings provided by an ESG rating provider established outside the Union and belonging to the same group provided that all of the following conditions are met:(a)the ESG rating provider established in the Union has applied to ESMA for authorisation of such endorsement;(b)the ESG rating provider established in the Union fulfils the following indicators of minimum substance:(i)it has its own premises or premises for its exclusive use in a Member State;(ii)it has at least one active bank account of its own in the Union; and(iii)it has an appropriate analytical and decision-making presence in the Union having regard to the nature, scale or complexity of its activities in the Union;(c)the endorsement of the ESG rating does not impair the quality of the assessment of the rated item, or the issuer of a rated item, or the arrangement of on-site reviews or visits, where provided for in the ESG rating methodology used by the ESG rating provider established outside the Union;(d)the ESG rating provider established in the Union has verified and is able to demonstrate on an ongoing basis to ESMA that the issuance and distribution of endorsed ESG ratings fulfils requirements which are at least as stringent as the requirements of this Regulation; the ESG rating provider established in the Union shall be permitted to demonstrate compliance with those requirements without being required to refer to the specific process followed for each individual rating;(e)the ESG rating provider established in the Union has the necessary expertise to effectively monitor the ESG ratings provided by the ESG rating provider established outside the Union, in order to manage any associated risks;(f)there is an objective reason why the ESG ratings need to be endorsed for their use in the Union, which can include factors such as the specificities of the ESG ratings, the need for proximity of the production of the ESG ratings to the issuer or to a specific economic reality, a particular industry, centres of excellence for sub-components of environmental, social and human rights, or governance factors, the availability of specific skills required for the production of the ESG ratings, the material availability of input data and the development of ESG ratings through the collaboration of global teams;(g)the ESG rating provider established in the Union provides ESMA at its request with all information necessary to enable ESMA to supervise compliance by the ESG rating provider established outside the Union, where relevant to the endorsed rating, with this Regulation on an ongoing basis;(h)where an ESG rating provider established outside the Union is subject to supervision, an appropriate cooperation arrangement is in place between ESMA and the competent authority of the third country where the ESG rating provider is established, to ensure an efficient exchange of information.2.An ESG rating provider established in the Union that applies for authorisation of an endorsement as referred to in paragraph 1, point (a), shall provide ESMA with all information necessary to satisfy ESMA that, at the time of application, the conditions referred to in that paragraph are fulfilled.3.Within 45 working days of receipt of a complete application for authorisation of an endorsement as referred to in paragraph 1, point (a), but no later than 85 working days after receipt of the initial application, ESMA shall examine the application and decide either to authorise the endorsement or to refuse it. ESMA shall notify the applicant of that decision within five working days.4.An endorsed ESG rating shall be considered to be an ESG rating provided by the endorsing ESG rating provider. The endorsing ESG rating provider shall not use the endorsement to avoid or circumvent the requirements of this Regulation.5.An endorsing ESG rating provider shall remain fully responsible for the endorsed ESG ratings and for compliance with the requirements of this Regulation.6.Where ESMA has well-founded reasons to consider that the conditions laid down in this Article are no longer fulfilled, it shall have the power to require the endorsing ESG rating provider to cease the endorsement, without prejudice to the imposition of any applicable supervisory measures, fines and periodic penalty payments in accordance with Articles 35, 36 and 37.

Article 12Recognition of ESG rating providers established outside the Union1.Until such time as the Commission has adopted an equivalence decision as referred to in Article 10 or, where adopted, in the event that the equivalence decision is repealed, an ESG rating provider established outside the Union with an annual net turnover of all of its activities that is below the maximum amount set in Article 3(2), second subparagraph, of Directive 2013/34/EU, for each of the last three consecutive years may operate in the Union provided that ESMA has recognised that ESG rating provider in accordance with this Article. An ESG rating provider established outside the Union that belongs to a group as defined in Article 2, point (11), of Directive 2013/34/EU whose consolidated annual net turnover of all of the group’s activities is below the maximum amount set in Article 3(5), second subparagraph, of Directive 2013/34/EU, for each of the last three consecutive years may operate in the Union provided that ESMA has recognised that ESG rating provider in accordance with this Article. To that end, ESMA may take into account either an assessment by an independent external auditor or a certification of the competent authority of the third country where the ESG rating provider is established.2.ESG rating providers established outside the Union that wish to be recognised as referred to in paragraph 1 shall comply with the requirements laid down in this Regulation and submit an application for recognition to ESMA.3.An ESG rating provider established outside the Union that wishes to be recognised as referred to in paragraph 1 shall have a legal representative. That legal representative shall be a legal person established in the Union and expressly appointed by the ESG rating provider to act on its behalf. The legal representative shall demonstrate to ESMA that the ESG rating provider meets the requirements of this Regulation on an ongoing basis and shall be accountable to ESMA in that respect. The legal representative shall, upon request, provide ESMA with all information necessary to satisfy ESMA that the ESG rating provider fulfils the requirements of this Regulation.4.An ESG rating provider established outside the Union shall, when submitting an application for recognition as referred to in paragraph 2, provide ESMA with the following:(a)all information listed in Annex I;(b)all information necessary to demonstrate that the conditions laid down in paragraph 1 of this Article are met;(c)all information necessary to satisfy ESMA that the ESG rating provider established outside the Union has established the necessary arrangements to meet the requirements referred to in paragraphs 2 and 3 of this Article;(d)the list of its actual or prospective ESG ratings which are intended for distribution in the Union;(e)where applicable, the name and contact details of the third-country competent authority responsible for its supervision.Within 90 working days of receipt of the application for recognition referred to in paragraph 2, ESMA shall decide whether to grant recognition. ESMA shall inform the applicant of its decision within five working days of the decision.5.ESMA shall recognise the ESG rating provider established outside the Union provided that all of the following conditions are met:(a)the ESG rating provider established outside the Union has complied with paragraphs 2, 3 and 4;(b)where the ESG rating provider established outside the Union is subject to supervision, ESMA shall seek to put in place an appropriate cooperation arrangement with the relevant competent authority of the third country where the ESG rating provider is established, in order to ensure an efficient exchange of information.6.ESMA shall adopt a decision rejecting the application where ESMA is prevented from exercising effectively its supervisory functions under this Regulation by the laws, regulations or administrative provisions of the third country where the ESG rating provider is established, or, where applicable, by limitations in the supervisory and investigatory powers of that third country’s competent authority.7.ESMA shall impose fines in accordance with Article 36, or suspend or, where appropriate, withdraw the recognition referred to in paragraph 1 of this Article, in line with Article 9, where it has well-founded reasons, based on documented evidence, to consider that the ESG rating provider:(a)is acting, or has been acting, in a manner which is clearly prejudicial to the interests of users of ESG ratings or to the orderly functioning of markets;(b)has seriously infringed this Regulation;(c)has made false statements or used any other irregular means to obtain the recognition.8.Where the ESG rating provider recognised under this Article by ESMA no longer meets the conditions laid down in paragraph 1, it shall notify ESMA thereof without undue delay.The ESG rating provider shall notify ESMA within three months of the date when it no longer meets the conditions laid down in paragraph 1 if it wishes to continue offering its services in the Union and shall apply for authorisation within 12 months of that date. In the absence of such notification, the ESG rating provider shall cease to operate in the Union.9.ESMA shall develop draft regulatory technical standards to determine the form and content of the application for recognition referred to in paragraph 2 and, in particular, the presentation of the information required in paragraph 4.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 2 October 2025.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Articles 10 to 14 of Regulation (EU) No 1095/2010.

Article 13Cooperation arrangements1.Any cooperation arrangement as referred to in Article 10(4), Article 11(1), point (h), and Article 12(5), point (b), shall be subject to guarantees of professional secrecy which are at least equivalent to those set out in Article 46. The exchange of information performed under such cooperation arrangements shall be intended for the performance of the tasks of ESMA or the third-country competent authorities.2.With regard to transfers of personal data to a third country, ESMA shall apply Regulation (EU) 2018/1725 of the European Parliament and of the CouncilRegulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39)..

CHAPTER 3Register and accessibility of information

Article 14Register of ESG rating providers and accessibility of information on the European single access point1.ESMA shall establish and maintain a register that contains the following information:(a)the identities of the ESG rating providers authorised pursuant to Article 8 or registered under the temporary regime for small ESG rating providers pursuant to Article 5(1);(b)the identities of the ESG rating providers established outside the Union that comply with the conditions laid down in Article 10 and the third-country competent authorities responsible for the supervision of those ESG rating providers;(c)the identities of the endorsing ESG rating providers and the endorsed ESG rating providers established outside the Union referred to in Article 11, and, where applicable, the third-country competent authorities responsible for the supervision of the endorsed ESG rating providers;(d)the identities of the ESG rating providers established outside the Union that have been recognised in accordance with Article 12, the legal representatives established in the Union of those ESG rating providers and, where applicable, the third-country competent authorities responsible for the supervision of those ESG rating providers.2.The register referred to in paragraph 1 shall be publicly accessible on the website of ESMA and shall be updated without delay, as necessary.3.From 1 January 2028, when making public any information referred to in Article 19(1) and Article 23(1) of this Regulation, the ESG rating provider shall submit that information at the same time to the collection body referred to in paragraph 6 of this Article for the purpose of making it accessible on the European single access point (ESAP) established under Regulation (EU) 2023/2859.4.That information shall comply with the following requirements:(a)be prepared in a data extractable format as defined in Article 2, point (3), of Regulation (EU) 2023/2859 or, where required under Union law, in a machine-readable format, as defined in Article 2, point (4), of Regulation (EU) 2023/2859;(b)be accompanied by the following metadata:(i)a full business name and, if applicable, the name used for marketing purposes and the abbreviation of the name of the ESG rating provider to which that information relates;(ii)where available, the legal entity identifier of the ESG rating provider as specified pursuant to Article 7(4), point (b), of Regulation (EU) 2023/2859;(iii)the type of information as classified pursuant to Article 7(4), point (c), of Regulation (EU) 2023/2859;(iv)the size of the ESG rating provider as specified pursuant to Article 7(4), point (d), of Regulation (EU) 2023/2859;(v)an indication of whether the information contains personal data.5.For the purposes of paragraph 4, point (b)(ii), the ESG rating provider shall obtain a legal entity identifier.6.For the purpose of making the information referred to in paragraph 1 of this Article accessible on ESAP, the collection body as defined in Article 2, point (2), of Regulation (EU) 2023/2859 shall be ESMA.7.From 1 January 2028, the information referred to in paragraph 1 and in Article 11(3), Article 35(6) and Article 38(1) of this Regulation shall be made accessible on ESAP. For that purpose, the collection body as defined in Article 2, point (2), of Regulation (EU) 2023/2859 shall be ESMA.That information shall:(a)be prepared in a data extractable format as defined in Article 2, point (3), of Regulation (EU) 2023/2859;(b)be accompanied by the following metadata:(i)all the names of the ESG rating providers to which the information relates;(ii)where available, the legal entity identifier of the ESG rating provider as specified pursuant to Article 7(4), point (b), of Regulation (EU) 2023/2859;(iii)the type of information as classified pursuant to Article 7(4), point (c), of Regulation (EU) 2023/2859;(iv)an indication of whether the information contains personal data.8.For the purpose of ensuring an efficient collection and management of information submitted in accordance with paragraph 3, ESMA shall develop draft implementing technical standards to specify:(a)any other metadata to accompany the information;(b)the structuring of data in the information;(c)for which information a machine-readable format is required and which machine-readable format is to be used.For the purposes of the first subparagraph, point (c), ESMA shall assess the advantages and disadvantages of different machine-readable formats and conduct appropriate field tests, in consultation with relevant stakeholders.ESMA shall submit the draft implementing technical standards referred to in the first subparagraph to the Commission.Power is conferred on the Commission to adopt the implementing technical standards referred to in the first subparagraph of this paragraph in accordance with Article 15 of Regulation (EU) No 1095/2010.9.Where necessary, ESMA shall adopt guidelines for entities to ensure that the metadata submitted in accordance with paragraph 8, first subparagraph, point (a), are correct.

TITLE IIIINTEGRITY AND RELIABILITY OF ESG RATING ACTIVITIESCHAPTER 1Organisational requirements, processes and documents concerning governance

Article 15General principles1.ESG rating providers shall ensure the independence of their rating activities, including from all political and economic influences or constraints.2.ESG rating providers shall have in place rules and procedures that ensure that their ESG ratings are issued, published and distributed in accordance with this Regulation.3.ESG rating providers shall employ systems, resources and procedures that are adequate and effective to comply with their obligations under this Regulation.4.ESG rating providers shall adopt and implement written policies and procedures that ensure that their ESG ratings are based on a thorough analysis of all information available to them that is relevant to their analysis in accordance with their rating methodologies.5.ESG rating providers shall adopt and implement internal due diligence policies and procedures that ensure that their business interests do not impair the independence or accuracy of the ESG rating activities.6.ESG rating providers shall adopt and implement sound administrative and accounting procedures, internal control mechanisms, and effective control and safeguard arrangements for information processing systems.7.ESG rating providers shall use rating methodologies for the ESG ratings they provide that are rigorous, systematic, independent and capable of justification and shall apply those rating methodologies continuously and in a transparent manner.8.ESG rating providers shall review the rating methodologies referred to in paragraph 7 on an ongoing basis and at least annually.9.ESG rating providers shall monitor and evaluate the adequacy and effectiveness of the systems, resources and procedures referred to in paragraph 3 at least annually and take appropriate measures to address any deficiencies.10.ESG rating providers shall establish and maintain a permanent, independent and effective oversight function to ensure oversight over all aspects of the provision of their ESG ratings.The oversight function shall have the necessary resources and expertise and have access to all information necessary to perform its duties. It shall have direct access to the management body of the ESG rating provider.ESG rating providers shall develop and maintain robust procedures regarding their oversight function.11.ESG rating providers shall adopt all necessary measures to ensure that the information they use in issuing ESG ratings is of sufficient quality and from reliable sources. ESG rating providers shall clearly state that their ESG ratings are their own opinion.12.ESG rating providers shall notify the rated item or the issuer of the rated item during its working hours and at least two full working days before the first issuance of the ESG rating in order to give the rated item or the issuer of the rated item an opportunity to inform the ESG rating providers of any factual errors. To that end, ESG rating providers shall make available, upon request by the rated item or by the issuer of the rated item, free of charge and on a non-commercial basis, the information referred to in point 1, points (b) and (c), and point 2, point (b)(ii), of Annex III, together with the date of the last update of data as well as, where relevant, any other data collected, estimated or computed that relates to the rated item or the issuer of a rated item.13.ESG rating providers shall not be obliged to disclose information about their intellectual capital, intellectual property, know-how or the results of innovation that would qualify as trade secrets as defined in Article 2, point (1), of Directive (EU) 2016/943 of the European Parliament and of the CouncilDirective (EU) 2016/943 of the European Parliament and of the Council of 8 June 2016 on the protection of undisclosed know-how and business information (trade secrets) against their unlawful acquisition, use and disclosure (OJ L 157, 15.6.2016, p. 1)..14.ESG rating providers shall only make changes to their ESG ratings in accordance with their rating methodologies published pursuant to Article 23.

Article 16Separation of business and activities1.ESG rating providers shall not provide any of the following activities:(a)consulting activities to investors or undertakings;(b)the issuance and distribution of credit ratings as defined in Article 3(1), point (a), of Regulation (EC) No 1060/2009;(c)the provision of benchmarks as defined in Article 3(1), point (5), of Regulation (EU) 2016/1011;(d)investment services and activities as defined in Article 4(1), point (2), of Directive 2014/65/EU;(e)statutory auditing on financial statements and assurance engagements on sustainability reporting within the meaning of Directive 2013/34/EU;(f)activities of credit institutions within the meaning of the Regulation (EU) No 575/2013, and insurance or reinsurance activities within the meaning of Directive 2009/138/EC.2.By way of derogation from paragraph 1, an ESG rating provider may provide the activities referred to in paragraph 1, point (d) or (f), provided that it puts in place, in addition to the measures referred to in Articles 25 and 26, specific measures:(a)to ensure that each activity is exercised autonomously;(b)to avoid the creation of potential risks of conflicts of interest in decision-making within its ESG rating activities;(c)to ensure that its employees who are directly involved in the assessment process of a rated item do not provide any of the activities referred to in paragraph 1, point (d) or (f).In implementing such measures, the ESG rating provider shall also take into account the activities of the group to which it belongs, if applicable.3.By way of derogation from paragraph 1, point (c), an ESG rating provider may lodge a request with ESMA to be authorised to provide benchmarks provided that it puts in place specific measures, including those referred to in paragraph 2. ESMA shall decide whether the measures proposed by the ESG rating provider are appropriate and sufficient regarding the potential risks of conflicts of interest. If ESMA considers that the measures are not appropriate or sufficient regarding the potential risks of conflicts of interest, paragraph 1, point (c), shall apply.Any substantial change in the measures taken by the ESG rating provider or in their implementation shall be notified to ESMA by the ESG rating provider before such change is implemented. ESMA shall decide whether the measures remain appropriate and sufficient regarding the potential risks of conflicts of interest. If ESMA considers that the measures are no longer appropriate or sufficient regarding the potential risks of conflicts of interest, paragraph 1, point (c), shall apply.ESMA shall take a decision as referred to in the first and second subparagraphs of this paragraph within 30 working days of receipt of complete information about the measures proposed by the ESG rating provider or any substantial changes thereto, or within the deadlines laid down in Article 7 where ESMA’s assessment forms part of its evaluation of the ESG rating provider’s application for authorisation.4.An ESG rating provider shall ensure that its employees who are directly involved in the assessment process of a rated item do not provide any of the activities referred to in paragraph 1, points (a), (b) and (e).5.ESMA shall develop draft regulatory technical standards to specify the details of the measures and safeguards to be implemented pursuant to paragraphs 2, 3 and 4.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 2 October 2025.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph in accordance with Articles 10 to 14 of Regulations (EU) No 1095/2010.6.ESG rating providers shall ensure that the provision of services other than those referred to in paragraph 1 does not create risks of conflicts of interest within its ESG rating activities. Where there are risks of conflicts of interest, ESG rating providers shall refrain from offering such other services.

Article 17Rating analysts, employees and other persons involved in the provision of ESG ratings1.ESG rating providers shall ensure that rating analysts, employees and any other natural person under their control or whose services are placed at their disposal, for example by way of a contractual arrangement, and who are directly involved in the provision of ESG ratings, including rating analysts directly involved in the rating process and persons involved in the provision of ESG scores, are appropriately trained and have the knowledge and experience necessary for the performance of the duties and tasks assigned, including, where appropriate, a sufficient understanding of any potential material financial risk to the rated item and any potential material impact of the rated item on the environment and on society in general.2.ESG rating providers shall ensure that the persons referred to in paragraph 1 are not allowed to initiate or participate in negotiations regarding fees or payments with any rated item or issuer of a rated item, or with any person directly or indirectly linked to the rated item or the issuer of a rated item by control.3.With the exception of holdings in diversified collective investment schemes, including managed funds, and of investments made under discretionary portfolio management:(a)the persons referred to in paragraph 1 who are directly involved in the determination of an individual rating of a rated item shall not buy or sell any financial instrument issued, guaranteed, or otherwise supported by any entity that is rated within their area of analytical responsibility or by any entity within the group of that entity, nor engage in any transaction in such financial instruments;(b)persons occupying a senior management position in the ESG rating provider shall not buy or sell any financial instrument issued, guaranteed or otherwise supported by any entity rated by the ESG rating provider, or by any entity within the group of that entity, nor engage in any transaction in such financial instruments.4.The persons referred to in paragraph 1 shall not be directly involved in or otherwise influence the determination of an ESG rating of the relevant rated item where those persons:(a)own financial instruments of the rated item, other than holdings in diversified collective investment schemes, including managed funds, and investments made under discretionary portfolio management;(b)own financial instruments of any entity related to a rated item, the ownership of which might cause or might be generally perceived as causing a conflict of interest, other than holdings in diversified collective investment schemes, including managed funds, and investments made under discretionary portfolio management;(c)have had in the last year an employment, business or other relationship with the entity rated by the ESG rating provider or any entity within the group of that entity that might cause or might be generally perceived as causing a conflict of interest.5.ESG rating providers shall ensure that the persons referred to in paragraph 1 and persons occupying a senior management position in the ESG rating provider:(a)take all reasonable measures to protect property and records in the possession of the ESG rating provider from fraud, theft or misuse, taking into account the nature, scale and complexity of the ESG rating provider’s business and the nature and range of its ESG rating activities;(b)do not share confidential information that has been entrusted to the ESG rating provider with anyone who is not directly involved in the provision of ESG rating activities, including rating analysts and employees of any person directly or indirectly linked to the ESG rating provider by control, and any other natural person whose services are or have been placed at the disposal of, or are under the control of, any person directly or indirectly linked to the ESG rating provider by control;(c)do not use or share confidential information for any other purpose than the provision of ESG rating activities, including for the trading of financial instruments; and(d)do not solicit or accept money, gifts or favours from anyone with whom the ESG rating provider does business.6.Where the persons referred to in paragraph 1 consider that any other person referred to in that paragraph has engaged in conduct that they consider to be illegal, they shall immediately report that to the oversight function. The ESG rating provider shall ensure that such reporting does not have any negative consequences for the person reporting.7.Where a rating analyst terminates his or her employment with the ESG rating provider and, within one year of that termination, joins a rated item or an issuer of a rated item the determination of an individual rating of which he or she has been directly involved in, the ESG rating provider shall review the relevant work of the rating analyst over the one-year period preceding his or her departure in order to verify whether there has been any conflict of interest.8.The persons referred to in paragraph 1, and persons occupying a senior management position in the ESG rating provider, shall not take up a senior management position within a rated item or an issuer of a rated item the determination of an individual rating of which they have been involved in for a period of nine months after the date of such rating.

Article 18Record-keeping requirements1.ESG rating providers shall record their ESG rating activities. Those records shall contain the information listed in Annexes I and II.2.ESG rating providers shall keep the information referred to in paragraph 1 for at least five years and in such a form that it is possible to replicate and fully understand the determination of an ESG rating.

Article 19Complaints-handling mechanism1.ESG rating providers shall have in place and publish on their website procedures for receiving, investigating and retaining records concerning complaints made by users of ESG ratings, by rated items and by issuers of rated items. ESG rating providers shall also clearly provide information on their website about their complaints-handling mechanism and contact details.2.The procedures referred to in paragraph 1 shall ensure that:(a)the ESG rating provider makes publicly available the complaints-handling policy;(b)complaints are investigated in a timely and fair manner and the outcome of the investigation is communicated to the complainant within a reasonable period of time, unless such communication would be contrary to objectives of public policy or to Regulation (EU) No 596/2014 of the European Parliament and of the CouncilRegulation (EU) No 596/2014 of the European Parliament and of the Council of 16 April 2014 on market abuse (market abuse regulation) and repealing Directive 2003/6/EC of the European Parliament and of the Council and Commission Directives 2003/124/EC, 2003/125/EC and 2004/72/EC (OJ L 173, 12.6.2014, p. 1).; and(c)the inquiry is conducted independently of any personnel who have been involved in the determination of an individual rating about which the complaint is made.3.Complaints may be submitted in respect of any of the following:(a)the sources of data used for an individual ESG rating, factual errors and mistakes;(b)the way in which the rating methodology in relation to an individual ESG rating has been applied;(c)whether an individual ESG rating is representative of the rated item or the issuer of the rated item.

Article 20Reasoned concerns1.ESG rating providers shall have in place procedures for receiving reasoned concerns from stakeholders that provide their names and position.2.ESG rating providers, with the exception of small ESG rating providers, within the meaning of Article 5(1) of this Regulation, shall endeavour to reply to the reasoned concerns within 30 working days of receipt thereof.

Article 21Outsourcing1.Outsourcing of important operational functions shall not be undertaken in such a way as to materially impair the quality of an ESG rating provider’s internal controls and the ability of ESMA to supervise the ESG rating provider’s compliance with its obligations under this Regulation.2.ESG rating providers that outsource functions or any services or activities that are relevant for the provision of an ESG rating shall remain fully responsible for discharging all of their obligations under this Regulation and for disclosing the information referred to in Annex II.

Article 22Exemptions from governance requirements1.An ESG rating provider may lodge a request with ESMA to be exempted from complying with the requirements laid down in Article 15(6), (8) and (10).2.When assessing a request as referred to in paragraph 1 of this Article, ESMA shall verify whether the following conditions are met:(a)the ESG rating provider is a small ESG rating provider, within the meaning of Article 5(1);(b)the ESG rating provider has implemented measures and procedures, and in particular internal control mechanisms, reporting arrangements and measures, that ensure the independence of rating analysts and persons approving ESG ratings and that ensure effective compliance with this Regulation;(c)the ESG rating provider has shown that its size has not been determined in such a way as to circumvent the requirements of this Regulation;(d)the ESG rating provider has demonstrated with sufficient clarity that the requirements laid down in Article 15(6), (8) and (10) are not proportionate to the nature, scale or complexity of the business of that ESG rating provider or in view of the nature or range of the issuance of ESG ratings.On the basis of those considerations, ESMA may exempt the ESG rating provider from all of the requirements laid down in Article 15(6), (8) and (10) or, in duly justified cases and based on the elements provided by the ESG rating provider pursuant to the first subparagraph, point (d), of this paragraph, from some of those requirements only.

CHAPTER 2Transparency requirements

Article 23Disclosure to the public of the methodologies, models and key rating assumptions used in ESG rating activities1.ESG rating providers shall disclose on their website, as a minimum, the methodologies, models and key rating assumptions that they use in their ESG rating activities, including the information referred to in point (d) of Annex I and point 1 of Annex III. Such disclosure shall be made in a clear and transparent manner and identified in a separate section of the ESG rating provider’s website.The ESG rating provider shall disclose the information referred to in point 1 of Annex III at the latest when it starts issuing ESG ratings.2.Separate E, S and G ratings shall be provided rather than a single ESG rating that aggregates E, S and G factors. ESG rating providers shall provide the disclosures referred to in this Article and in Article 24 separately for each factor.3.By way of derogation from paragraph 2 of this Article, ESG rating providers may provide a single ESG rating that aggregates E, S and G factors if they provide, without prejudice to further disclosure obligations under this Regulation, the information referred to in point (h) of point 1 of Annex III.4.ESMA shall develop draft regulatory technical standards to specify further the elements to be disclosed in accordance with paragraph 1, first subparagraph. Those elements shall not include any additional disclosure requirements other than those listed in point 1 of Annex III.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph of this paragraph to the Commission by 2 October 2025.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Articles 10 to 14 of Regulation (EU) No 1095/2010.5.ESMA may develop draft implementing technical standards to specify the data standards, formats and templates that ESG rating providers are to use to present the information referred to in paragraph 1.ESMA shall submit the draft implementing technical standards referred to in the first subparagraph of this paragraph to the Commission.Power is conferred on the Commission to adopt the implementing technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Article 15 of Regulation (EU) No 1095/2010.

Article 24Disclosures to users of ESG ratings, rated items and issuers of rated items1.ESG rating providers shall disclose, as a minimum, the information referred to in point 2 of Annex III to users of ESG ratings, rated items and issuers of rated items on an ongoing basis.2.An ESG rating provider shall ensure that when it authorises a user of ESG ratings to disclose an ESG rating, a link to the information referred to in point 1 of Annex III is attached to the ESG rating.3.ESMA shall develop draft regulatory technical standards to specify further the elements that are to be disclosed in accordance with paragraph 1. Those elements shall not include any additional disclosure requirements other than those listed in point 2 of Annex III.ESMA shall submit the draft regulatory technical standards referred to in the first subparagraph to the Commission by 2 October 2025.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Articles 10 to 14 of Regulation (EU) No 1095/2010.4.ESMA may develop draft implementing technical standards to specify the data standards, formats and templates that ESG rating providers are to use to present the information referred to in paragraph 1.ESMA shall submit the draft implementing technical standards referred to in the first subparagraph of this paragraph to the Commission.Power is conferred on the Commission to adopt the implementing technical standards referred to in the first subparagraph of this paragraph in accordance with the procedure laid down in Article 15 of Regulation (EU) No 1095/2010.

CHAPTER 3Independence and conflicts of interest

Article 25Independence and avoidance of conflicts of interest1.ESG rating providers shall have in place robust governance arrangements, including a clear organisational structure with well-defined, transparent and consistent roles and responsibilities for all persons involved in the provision of an ESG rating.2.ESG rating providers shall take all necessary steps to ensure that any ESG rating provided is not affected by any existing or potential conflict of interest, or by any business or other relationship, arising either from the ESG rating providers themselves or from their shareholders, managers, rating analysts, employees or any other natural persons whose services are placed at the disposal or under the control of the ESG rating providers, or any persons directly or indirectly linked to them by control or any third-party providers to whom functions or any services or activities have been outsourced.3.Where there is a risk of a conflict of interest within an ESG rating provider due to the ownership structure, controlling interests or activities of that ESG rating provider, of any entity owning or controlling the ESG rating provider, of an entity that is owned or controlled by the ESG rating provider, or of any of the ESG rating provider’s affiliates or third-party providers, ESMA shall take appropriate action. ESMA may require the ESG rating provider to take measures to mitigate that risk.Where a conflict of interest as referred to in the first subparagraph is not adequately managed through the risk mitigation measures referred to in the first subparagraph, ESMA shall require the ESG rating provider to resolve that conflict of interest. If necessary, ESMA may require the ESG rating provider to cease the activities or relationships that create the conflict of interest, or to cease providing the ESG ratings.4.A shareholder or a member of an ESG rating provider exercising significant influence within the meaning of Article 2, point (13), second sentence, of Directive 2013/34/EU over that ESG rating provider, or over an undertaking which has the power to exercise control or a dominant influence over that ESG rating provider, shall be prohibited from doing any of the following:(a)exercising significant influence over any other ESG rating provider;(b)having the right or the power to appoint or remove members of the administrative or supervisory board of any other ESG rating provider;(c)being a member of the administrative or supervisory board of any other ESG rating provider.The first subparagraph of this paragraph shall not apply to investments in other ESG rating providers belonging to the same group of ESG rating providers or to investments in ESG rating providers that are micro-undertakings or small undertakings according to the criteria laid down in Article 3(1) and Article 3(2), first subparagraph, respectively, of Directive 2013/34/EU.5.ESG rating providers shall disclose to ESMA all existing or potential conflicts of interest, including conflicts of interest arising from the ownership or control of the ESG rating providers.6.ESG rating providers shall establish and operate policies, procedures and effective organisational arrangements for the identification, disclosure, prevention, management and mitigation of conflicts of interest. ESG rating providers shall regularly review and update those policies, procedures and arrangements. Those policies, procedures and arrangements shall specifically prevent, manage and mitigate conflicts of interest due to the ESG rating provider’s ownership or control or due to other interests in the ESG rating provider’s group, or conflicts of interest that are caused by other persons that exercise influence or control over the ESG rating provider in relation to determining the ESG rating.7.ESG rating providers shall review their operations to identify potential conflicts of interest at least annually.

Article 26Management of potential conflicts of interest arising from employees1.ESG rating providers shall ensure that their employees and any other natural persons whose services are placed at their disposal or under their control and who are directly involved in the provision of an ESG rating:(a)have the skills that are necessary for performing their tasks and duties and are subject to effective management and supervision;(b)are not subject to undue influence or conflicts of interest;(c)are not compensated and their performance is not evaluated in such a manner as to create conflicts of interest or otherwise impinge upon the integrity of the ESG rating determination process;(d)do not have any interests or business connections that compromise the activities of the ESG rating provider;(e)are prohibited from contributing to an ESG rating determination by way of engaging in bids, offers and trades on a personal basis or on behalf of market participants, except where such contribution is expressly required as part of the ESG rating methodology and is subject to specific rules laid down therein; and(f)are subject to effective procedures to control the exchange of information with other employees involved in activities that might create a risk of conflicts of interest or with third parties, where that information might affect the ESG rating.2.ESG rating providers shall establish specific internal control procedures to ensure the integrity and reliability of the employee or person determining the ESG rating, including internal approval by management before the distribution of the ESG rating.

Article 27Fair, reasonable, transparent and non-discriminatory treatment of users of ESG ratings1.ESG rating providers shall take steps that are adequate to ensure that fees charged to clients are fair, reasonable, transparent and non-discriminatory.2.For the purposes of paragraph 1 of this Article, ESMA may require ESG rating providers to provide it with documented evidence on their pricing policy, including the fee structure and pricing criteria. ESMA may take supervisory measures in accordance with Article 35, and may decide to impose fines in accordance with Article 36 where it finds that fees charged by ESG rating providers are not fair, reasonable, transparent and non-discriminatory.

CHAPTER 4Supervision by ESMASection 1General principles

Article 28Non-interference with the content of ESG ratings or methodologiesIn carrying out their duties under this Regulation, ESMA, the Commission or any Member State public authorities shall not interfere with the content of ESG ratings or methodologies.

Article 29ESMA1.In accordance with Article 16 of Regulation (EU) No 1095/2010, ESMA shall issue and update guidelines on the cooperation between ESMA and the competent authorities for the purposes of this Regulation, including the procedures for, and detailed conditions relating to, the delegation of tasks.2.In accordance with Article 16 of Regulation (EU) No 1095/2010, ESMA shall, in cooperation with EBA and EIOPA, issue and update guidelines on the application of the endorsement regime referred to in Article 11 of this Regulation by 2 October 2025.3.ESMA shall publish an annual report on the application of this Regulation, including on the supervisory measures taken and fines and periodic penalty payments imposed by ESMA under this Regulation. That report shall contain, in particular, information on the evolution of the ESG ratings market in the Union and an assessment of the application of the third-country regimes referred to in Articles 10, 11 and 12.ESMA shall present the annual report referred to in the first subparagraph to the European Parliament, the Council and the Commission.4.ESMA shall publish annually on its website a list of ESG rating providers included in the register referred to in Article 14(1), indicating their total market share in the Union. The publication shall take stock of the market structure, including concentration levels and the diversity of ESG rating providers.5.For the purposes of paragraph 4, the market share shall be measured by reference to the annual turnover generated from ESG rating activities at group level in the Union.6.ESMA shall cooperate with EBA and EIOPA in performing its tasks and shall consult EBA and EIOPA before issuing and updating guidelines and submitting draft regulatory technical standards under this Regulation.

Article 30Competent authorities1.By 2 April 2026, each Member State shall designate a competent authority for the purposes of this Regulation.2.The competent authorities shall be adequately staffed, with regard to capacity and expertise, to be able to carry out their tasks under this Regulation.

Article 31Exercise of the powers referred to in Articles 32, 33 and 34The powers conferred on ESMA or on any official, or other person authorised by, ESMA by Articles 32, 33 and 34 shall not be used to require the disclosure of information or documents which are subject to legal privilege.

Article 32Requests for information1.ESMA may by simple request or by decision require ESG rating providers, persons involved in ESG rating activities, rated items and issuers of rated items, third parties to whom ESG rating providers have outsourced operational functions or activities, and persons otherwise closely and substantially related or connected to ESG rating providers or ESG rating activities, to provide all information that it needs to carry out its duties under this Regulation.2.When sending a simple request for information under paragraph 1 of this Article, ESMA shall:(a)refer to this Article as the legal basis for the request;(b)state the purpose of the request;(c)specify what information is required;(d)set a reasonable time limit within which the information is to be provided and the format in which the requested information is to be provided;(e)inform the person from whom the information is requested that there is no obligation to provide the information but that any reply to the request for information must not be incorrect or misleading;(f)indicate the fines provided for in Article 36, where the information supplied is incorrect or misleading.3.When requiring the provision of information by decision under paragraph 1 of this Article, ESMA shall:(a)refer to this Article as the legal basis for the request;(b)state the purpose of the request;(c)specify what information is required;(d)set a reasonable time limit within which the information is to be provided and the format in which the requested information is to be provided;(e)indicate the periodic penalty payments provided for in Article 37 where the requested information is not submitted within the set time limit or is incomplete;(f)indicate the fines provided for in Article 36 where the information supplied is incorrect or misleading;(g)indicate the right to appeal the decision before the Board of Appeal in accordance with Article 60 of Regulation (EU) No 1095/2010 and to have the decision reviewed by the Court of Justice of the European Union in accordance with Article 61 of Regulation (EU) No 1095/2010.4.The persons referred to in paragraph 1 or their representatives, and, in the case of legal persons or of associations having no legal personality, the persons authorised to represent them by law or by their constitution, shall supply the information requested. Lawyers duly authorised to act may supply the information on behalf of their clients. Those clients shall remain fully responsible if the information supplied by their lawyers is incomplete, incorrect or misleading.5.ESMA shall, without delay, send a copy of the simple request or of its decision to the competent authority of the Member State where the persons referred to in paragraph 1 who are concerned by the request for information are domiciled or established.

Article 33General investigations1.In order to carry out its duties under this Regulation, ESMA may conduct all necessary investigations of the persons referred to in Article 32(1). To that end, the officials and other persons authorised by ESMA shall be empowered to:(a)examine any records, data, procedures and any other material relevant to the execution of their tasks irrespective of the medium on which they are stored;(b)take or obtain certified copies of or extracts from such records, data, procedures and other material;(c)summon and ask any person referred to in Article 32(1), or their representatives or staff, for oral or written explanations on facts or documents related to the subject matter and purpose of the investigation and to record the answers;(d)interview any other natural or legal person who consents to be interviewed for the purpose of collecting information relating to the subject matter of an investigation;(e)request records of telephone and data traffic.2.The officials and other persons authorised by ESMA for the purposes of the investigations referred to in paragraph 1 shall exercise their powers upon the production of a written authorisation specifying the subject matter and purpose of the investigation. That authorisation shall also indicate the periodic penalty payments provided for in Article 37(1) where the production of the required records, data, procedures or any other material, or the information supplied by the persons referred to in Article 32(1), are not provided or are incomplete, and the fines provided for in Article 36 where the information supplied by the persons referred to in Article 32(1) is incorrect or misleading.3.The persons referred to in Article 32(1) of this Regulation shall submit to investigations launched on the basis of a decision of ESMA. The decision shall specify the subject matter and purpose of the investigation, the periodic penalty payments provided for in Article 37 of this Regulation, the legal remedies available under Regulation (EU) No 1095/2010 and the right to have the decision reviewed by the Court of Justice of the European Union.4.In good time before the investigation, ESMA shall inform the competent authority of the Member State in whose territory that investigation is to be carried out of the investigation and of the identity of the persons authorised by ESMA for the purposes of the investigation. Officials of the competent authority concerned shall, upon the request of ESMA, assist those authorised persons in carrying out their duties. Officials of the competent authority concerned may also attend the investigation upon request.5.If a request for records of telephone or data traffic referred to in paragraph 1, point (e), requires authorisation from a judicial authority according to national rules, such authorisation shall be applied for. Such authorisation may also be applied for as a precautionary measure.6.Where an authorisation as referred to in paragraph 5 is applied for, the national judicial authority shall verify that the decision of ESMA is authentic and that the coercive measures envisaged are neither arbitrary nor excessive having regard to the subject matter of the investigation. When verifying the proportionality of the coercive measures, the national judicial authority may ask ESMA for detailed explanations, in particular relating to the grounds ESMA has for suspecting that an infringement of this Regulation has taken place, the seriousness of the suspected infringement and the nature of the involvement of the person subject to the coercive measures. However, the national judicial authority shall not review the necessity for the investigation or demand that it be provided with the information on ESMA’s file. The lawfulness of ESMA’s decision shall be subject to review only by the Court of Justice of the European Union following the procedure set out in Regulation (EU) No 1095/2010.

Article 34On-site inspections1.In order to carry out its duties under this Regulation, ESMA may conduct all necessary on-site inspections at the business premises of the legal persons referred to in Article 32(1). Where the proper conduct and efficiency of the inspection so require, ESMA may carry out the on-site inspection without prior announcement.2.The officials and other persons authorised by ESMA to conduct an on-site inspection may enter any business premises and land of the legal persons subject to an investigation decision adopted by ESMA and shall have the powers provided for in Article 33(1). They shall also have the power to seal any business premises and books or records for the period of, and to the extent necessary for, the inspection.3.The officials and other persons authorised by ESMA to conduct an on-site inspection shall exercise their powers upon production of a written authorisation specifying the subject matter and purpose of the inspection. That authorisation shall also indicate the periodic penalty payments provided for in Article 37 where the persons concerned do not submit to the inspection. In good time before the inspection, ESMA shall give notice of the inspection to the competent authority of the Member State where it is to be conducted.4.The persons referred to in Article 32(1) of this Regulation shall submit to on-site inspections ordered by decision of ESMA. The decision shall specify the subject matter and purpose of the inspection, the date on which it is to begin, the periodic penalty payments provided for in Article 37 of this Regulation, the legal remedies available under Regulation (EU) No 1095/2010 and the right to have the decision reviewed by the Court of Justice of the European Union. ESMA shall take such decisions after consulting the competent authority of the Member State where the inspection is to be conducted.5.Officials and other persons authorised or appointed by the competent authority of the Member State where the inspection is to be conducted shall, upon the request of ESMA, actively assist the officials and other persons authorised by ESMA. To that end, they shall enjoy the powers set out in paragraph 2. Officials of the competent authority of the Member State concerned may also attend the on-site inspections upon request.6.ESMA may also require the competent authorities to carry out specific investigatory tasks and on-site inspections on its behalf, as provided for in this Article and in Article 33(1). To that end, the competent authorities shall enjoy the same powers as ESMA as set out in this Article and in Article 33(1).7.Where the officials and other persons authorised by ESMA find that a person opposes an inspection ordered pursuant to this Article, the competent authority of the Member State concerned shall afford them the necessary assistance, requesting, where appropriate, the assistance of the police or of an equivalent enforcement authority, so as to enable them to conduct their on-site inspection.8.If the on-site inspection provided for in paragraph 1 or the assistance provided for in paragraph 7 requires authorisation by a judicial authority according to national rules, such authorisation shall be applied for. Such authorisation may also be applied for as a precautionary measure.9.Where an authorisation as referred to in paragraph 8 is applied for, the national judicial authority shall verify that the decision of ESMA is authentic and that the coercive measures envisaged are neither arbitrary nor excessive having regard to the subject matter of the inspection. When verifying the proportionality of the coercive measures, the national judicial authority may ask ESMA for detailed explanations, in particular relating to the grounds ESMA has for suspecting that an infringement of this Regulation has taken place, the seriousness of the suspected infringement and the nature of the involvement of the person subject to the coercive measures. However, the national judicial authority shall not review the necessity for the inspection or demand to be provided with the information on ESMA’s file. The lawfulness of ESMA’s decision shall be subject to review only by the Court of Justice of the European Union following the procedure set out in Regulation (EU) No 1095/2010.

Section 2Supervisory measures and penalties

Article 35Supervisory measures by ESMA1.Where ESMA finds that an ESG rating provider has not complied with its obligations under this Regulation, it shall take one or more of the following supervisory measures:(a)suspend or withdraw the authorisation or recognition of the ESG rating provider;(b)temporarily prohibit the ESG rating provider from publishing or distributing ESG ratings, until the infringement has been brought to an end;(c)require the ESG rating provider to bring the infringement to an end;(d)impose fines pursuant to Article 36;(e)issue public notices.2.ESMA may also take one or more of the supervisory measures referred to in paragraph 1, points (b) to (e), of this Article in respect of any ESG rating provider that operates in the Union pursuant to Article 2(1):(a)without complying with Article 4, or where ESMA has suspended or withdrawn the ESG rating provider’s authorisation or recognition referred to in that Article;(b)without complying with the conditions to benefit from any exclusion set out in Article 2(2).3.ESMA may also take the supervisory measure referred to in paragraph 1, point (e), in the event that an ESG rating activity of an ESG rating provider operating in the Union poses a serious threat to market integrity or to investor protection in the Union.In order to verify whether a person is operating in the Union pursuant to Article 2(1), ESMA may use the powers conferred on it by Articles 32, 33 and 34 in respect of the person concerned or any third parties who enable the person concerned to carry out the ESG rating activity.4.The supervisory measures referred to in paragraph 1 shall be effective, proportionate and dissuasive.5.When taking any of the supervisory measures referred to in paragraph 1, ESMA shall take into account the nature and seriousness of the infringement, having regard to the following criteria:(a)the duration and frequency of the infringement;(b)whether financial crime has been committed or facilitated or is otherwise attributable to the infringement;(c)whether the infringement has been committed intentionally or negligently;(d)the degree of responsibility of the person responsible for the infringement;(e)the financial strength of the ESG rating provider, as indicated by its total annual net turnover;(f)the impact of the infringement on the interests of investors and on other users of ESG ratings;(g)the importance of the profits gained and losses avoided by the ESG rating provider or the losses for third parties derived from the infringement, insofar as such profits and losses can be determined;(h)the level of cooperation of the ESG rating provider with ESMA, without prejudice to the need to ensure the disgorgement of profits gained or losses avoided by that ESG rating provider due to the infringement;(i)any previous infringements by the ESG rating provider;(j)measures taken after the infringement by the ESG rating provider to prevent its repetition.For the purposes of the first subparagraph, point (c), an infringement shall be considered to have been committed intentionally if ESMA finds objective elements which demonstrate that a person acted deliberately to commit the infringement.6.ESMA shall notify any decision to take a supervisory measure pursuant to paragraph 1 to the person responsible for the infringement without undue delay. ESMA shall publish any such decision on its website within 10 working days of the date when it was adopted.The publication referred to in the first subparagraph shall contain all of the following:(a)a statement affirming the right of the ESG rating provider to appeal the decision;(b)where relevant, a statement affirming that an appeal has been lodged and specifying that such an appeal does not have suspensive effect;(c)a statement asserting that it is possible for ESMA to suspend the application of the contested decision in accordance with Article 60(3) of Regulation (EU) No 1095/2010.7.ESMA may also require the infringing ESG rating provider to inform the users of its ESG ratings of any supervisory measure taken by ESMA pursuant to paragraph 1.

Article 36Fines1.Where ESMA finds that an ESG rating provider, or, where applicable, its legal representative, has, intentionally or negligently, infringed this Regulation, it shall adopt a decision imposing a fine. The maximum amount of the fine shall be 10 % of the total annual net turnover of the ESG rating provider, calculated on the basis of the most recent available financial statements approved by the management body of the ESG rating provider.2.Where the ESG rating provider referred to in paragraph 1 of this Article is a parent undertaking or a subsidiary of a parent undertaking which is required to prepare consolidated financial accounts in accordance with Directive 2013/34/EU, the relevant total annual net turnover shall be either the total annual net turnover, or the corresponding type of income in accordance with applicable Union law in the area of accounting, according to the most recent available consolidated accounts approved by the management body of the ultimate parent undertaking.3.When determining the level of a fine pursuant to paragraph 1 of this Article, ESMA shall take into account the criteria set out in Article 35(5).4.Notwithstanding paragraph 3, where the ESG rating provider referred to in paragraph 1 has directly or indirectly benefitted financially from the infringement, the amount of the fine shall be at least equal to that benefit.5.Where an act or omission of an ESG rating provider constitutes more than one infringement of this Regulation, only the higher fine calculated in accordance with paragraph 2 and relating to one of those infringements shall apply.

Article 37Periodic penalty payments1.ESMA shall, by decision, impose periodic penalty payments to compel:(a)an ESG rating provider to put an end to an infringement in accordance with a decision taken pursuant to Article 35(1), point (c);(b)the persons referred to in Article 32(1):(i)to supply complete information which has been requested by a decision taken pursuant to Article 32(3);(ii)to submit to an investigation and in particular to produce complete records, data, procedures or any other material required and to complete and correct other information provided in an investigation launched by a decision taken pursuant to Article 33(3);(iii)to submit to an on-site inspection ordered by a decision taken pursuant to Article 34(4).2.A periodic penalty payment shall be effective and proportionate. ESMA shall impose the periodic penalty payment on a daily basis until the ESG rating provider or person concerned complies with the relevant decision referred to in paragraph 1.3.Notwithstanding paragraph 2, the amount of the periodic penalty payments shall be 3 % of the average daily turnover in the preceding business year or, in the case of natural persons, 2 % of the average daily income in the preceding calendar year. It shall be calculated from the date stipulated in the decision imposing the periodic penalty payment.4.A periodic penalty payment shall be imposed for a maximum period of six months following notification of ESMA’s decision referred to in paragraph 1. Following the end of the period for which the periodic penalty payment is imposed, ESMA shall review the measure.

Article 38Disclosure, nature, enforcement and allocation of fines and periodic penalty payments1.ESMA shall disclose to the public every fine and every periodic penalty payment that it has imposed pursuant to Articles 36 and 37 of this Regulation, unless such disclosure would seriously jeopardise Union financial markets or cause disproportionate damage to the parties involved. Such disclosure shall not contain personal data within the meaning of Regulation (EU) 2018/1725.2.Fines and periodic penalty payments imposed pursuant to Articles 36 and 37 shall be of an administrative nature.3.Fines and periodic penalty payments imposed pursuant to Articles 36 and 37 shall be enforceable.Enforcement of fines and periodic penalty payments shall be governed by the rules of procedure in force in the Member State or third country in which the fines and periodic penalty payments are enforced.4.Fines and periodic penalty payments shall be allocated to the general budget of the Union.

Section 3Procedures and review

Article 39Procedural rules for taking supervisory measures and imposing fines1.Where ESMA finds that there are serious indications of a possible infringement of this Regulation, ESMA shall appoint an independent investigation officer within ESMA to investigate the matter. That investigation officer shall not be directly or indirectly involved or have been directly or indirectly involved in the supervision of the ESG ratings to which the infringement relates and shall perform his or her functions independently from ESMA’s Board of Supervisors.2.The investigation officer referred to in paragraph 1 shall investigate the alleged infringements, take into account any comments submitted by the persons who are subject to the investigation, and submit a complete file with his or her findings to ESMA’s Board of Supervisors.3.The investigation officer shall have the power to request information in accordance with Article 32 and to conduct investigations and on-site inspections in accordance with Articles 33 and 34.4.When carrying out his or her tasks, the investigation officer shall have access to all documents and information that have been gathered by ESMA in its supervisory activities.5.The rights of defence of the persons subject to the investigation shall be fully respected during investigations under this Regulation.6.Upon submission of the file with his or her findings to ESMA’s Board of Supervisors, the investigation officer shall notify the persons who are subject to the investigation.7.On the basis of the file containing the investigation officer’s findings, and where requested by the persons concerned after having heard those persons in accordance with Article 40, ESMA’s Board of Supervisors shall assess whether one or more persons subject to the investigation have committed the infringements concerned and shall, where it comes to the conclusion that such infringements have been committed, take a supervisory measure as referred to in Article 35 and impose a fine in accordance with Article 36.8.The investigation officer shall not participate in the deliberations of ESMA’s Board of Supervisors or in any other way intervene in the decision-making process of ESMA’s Board of Supervisors.9.The Commission shall adopt delegated acts in accordance with Article 47 to supplement this Regulation by adopting further rules of procedure for the exercise of ESMA’s power to impose fines or periodic penalty payments, including provisions on rights of defence, temporal provisions and the collection of fines or periodic penalty payments, and by adopting detailed rules on the limitation periods for the imposition and enforcement of fines and periodic penalty payments.10.ESMA shall refer matters for criminal prosecution to the national authorities concerned where, in carrying out its tasks under this Regulation, it finds that there are serious indications of the possible existence of facts liable to constitute criminal offences. ESMA shall refrain from imposing fines or periodic penalty payments where a prior acquittal or conviction arising from an identical fact or facts which are substantially the same has already acquired the force of res judicata as the result of criminal proceedings under national law.

Article 40Hearing of persons subject to investigations1.Before taking any decision imposing a supervisory measure, fine or periodic penalty payment pursuant to Article 35, 36 or 37, ESMA shall give the persons subject to the investigations the opportunity to be heard on its findings. ESMA shall base its decisions only on findings on which the persons subject to the investigations have had an opportunity to comment.The first subparagraph shall not apply where urgent action pursuant to Article 35 is needed to prevent significant and imminent damage to the financial system. In such a case, ESMA may adopt an interim decision and shall give the persons concerned the opportunity to be heard as soon as possible after taking its decision.2.The rights of defence of the persons subject to the investigations shall be fully respected during the investigations. They shall be entitled to have access to ESMA’s file, subject to the legitimate interest of other persons in the protection of their business secrets. The right of access to the file shall not extend to confidential information or ESMA’s internal preparatory documents.

Article 41Review by the Court of Justice of the European UnionThe Court of Justice of the European Union shall have unlimited jurisdiction to review decisions of ESMA imposing a fine or a periodic penalty payment. It may annul, or reduce or increase the amount of, the fine or periodic penalty payment imposed.

Section 4Fees and delegation

Article 42Supervisory fees1.ESMA shall charge proportionate fees to ESG rating providers in accordance with the delegated acts adopted pursuant to paragraph 2. Those fees shall fully cover ESMA’s necessary expenditure relating to the supervision of ESG rating providers and the reimbursement of any costs that the competent authorities might incur when carrying out tasks pursuant to this Regulation, and in particular as a result of any delegation of tasks in accordance with Article 43.2.The amount of an individual fee shall be proportionate to the annual net turnover of the ESG rating provider concerned.By 2 January 2026, the Commission shall adopt delegated acts in accordance with Article 47 to supplement this Regulation by specifying the type of fees, the matters for which fees are due, the amount of the fees and the respective justification, the manner in which they are to be paid and, where applicable, the way in which ESMA is to reimburse the competent authorities in respect of any costs that they might incur when carrying out tasks pursuant to this Regulation, in particular as a result of any delegation of tasks as referred to in Article 43. Those delegated acts shall establish fees which are proportionate and appropriate to the size of ESG rating providers and to the extent of their supervision, in particular when they are categorised as small ESG rating providers.

CHAPTER 5Cooperation between ESMA and the competent authorities

Article 43Delegation of tasks by ESMA to the competent authorities1.Where necessary for the proper performance of a supervisory task, ESMA may delegate the following supervisory tasks to the competent authority of a Member State in accordance with the guidelines issued by ESMA pursuant to Article 16 of Regulation (EU) No 1095/2010:(a)the power to request information in accordance with Article 32 of this Regulation;(b)the power to conduct investigations and on-site inspections in accordance with Articles 33 and 34 of this Regulation.2.Prior to the delegation of a task in accordance with paragraph 1, ESMA shall consult the relevant competent authority about:(a)the scope of the task to be delegated;(b)the timetable for the performance of the task; and(c)the transmission of necessary information by and to ESMA.3.ESMA shall reimburse the relevant competent authority for costs incurred as a result of carrying out delegated tasks. The costs to be reimbursed shall comprise all fixed costs, as well as variable costs related to the performance of the delegated tasks or the assistance provided by the competent authority to ESMA.4.ESMA shall review any delegation made in accordance with paragraph 1 at appropriate intervals. ESMA may revoke a delegation at any time.5.A delegation of tasks shall not affect the responsibility of ESMA nor limit ESMA’s ability to conduct and oversee the delegated activity. ESMA shall not delegate supervisory responsibilities, including authorisation decisions, final assessments and follow-up decisions concerning infringements.

Article 44Exchange of informationESMA and the competent authorities shall, without undue delay, provide each other with the information required for carrying out their duties under this Regulation or their respective supervisory responsibility and mandates.

Article 45Notifications and suspension requests by the competent authorities1.A competent authority of a Member State that finds that acts infringing this Regulation are being, or have been, carried out by an ESG rating provider on the territory of its own or of another Member State shall inform ESMA thereof. Where a competent authority considers it appropriate for investigatory purposes, that competent authority may suggest to ESMA that it assess the need to use the powers under Article 32 in relation to the ESG rating provider involved in those acts.2.ESMA shall take appropriate action. ESMA shall inform the notifying competent authority of the outcome and, as far as possible, of any significant interim developments.3.A notifying competent authority of a Member State that considers that an ESG rating provider listed in the register referred to in Article 14 whose ESG ratings are used within the territory of that Member State has infringed this Regulation in such a way that the protection of investors or the stability of the financial system in that Member State is significantly impacted, may request ESMA to suspend the provision of ESG ratings by the ESG rating provider concerned. The notifying competent authority shall provide ESMA with full reasons for its request.4.Where ESMA considers that the request referred to in paragraph 3 is not justified, it shall inform the notifying competent authority thereof in writing, setting out the reasons for its opinion. Where ESMA considers that the request is justified, it shall take appropriate measures to resolve the issue and it shall inform the notifying competent authority thereof in writing.

Article 46Professional secrecy1.The obligation of professional secrecy shall apply to ESMA, the competent authorities and all persons who work or who have worked for ESMA, for the competent authorities or for any other person to whom ESMA has delegated tasks, including auditors and experts contracted by ESMA. Information covered by professional secrecy shall not be disclosed to any other person or authority except by virtue of Union or national law.2.All information exchanged under this Regulation between ESMA, the competent authorities, EBA, EIOPA, and the European Systemic Risk Board established by Regulation (EU) No 1092/2010 of the European Parliament and of the CouncilRegulation (EU) No 1092/2010 of the European Parliament and of the Council of 24 November 2010 on European Union macro-prudential oversight of the financial system and establishing a European Systemic Risk Board (OJ L 331, 15.12.2010, p. 1)., that concerns business or operational conditions or other economic or personal affairs shall be considered confidential, except where:(a)ESMA or the competent authority or another authority or body concerned states at the time of communication that such information can be disclosed;(b)disclosure of such information is necessary for legal proceedings;(c)the information disclosed is used in a summary or in an aggregate form in which individual financial market participants cannot be identified.

TITLE IVDELEGATED AND IMPLEMENTING ACTS

Article 47Exercise and revocation of the delegation and objections to delegated acts1.The power to adopt delegated acts is conferred on the Commission subject to the conditions laid down in this Article.2.The power to adopt delegated acts referred to in Article 10(3), Article 39(9) and Article 42(2) shall be conferred on the Commission for a period of five years from 1 January 2025. The Commission shall draw up a report in respect of the delegation of power not later than nine months before the end of that five-year period. The delegation of power shall be tacitly extended for periods of an identical duration, unless the European Parliament or the Council opposes such extension not later than three months before the end of each period.3.The delegation of power referred to in Article 10(3), Article 39(9) and Article 42(2) may be revoked at any time by the European Parliament or by the Council. A decision to revoke shall put an end to the delegation of the power specified in that decision. It shall take effect the day following the publication of the decision in the Official Journal of the European Union or at a later date specified therein. It shall not affect the validity of any delegated acts already in force.4.Before adopting a delegated act, the Commission shall consult experts designated by each Member State in accordance with the principles laid down in the Interinstitutional Agreement of 13 April 2016 on Better Law-Making.5.As soon as it adopts a delegated act, the Commission shall notify it simultaneously to the European Parliament and to the Council.6.A delegated act adopted pursuant to Article 10(3), Article 39(9) and Article 42(2) shall enter into force only if no objection has been expressed either by the European Parliament or by the Council within a period of three months of notification of that act to the European Parliament and the Council or if, before the expiry of that period, the European Parliament and the Council have both informed the Commission that they will not object. That period shall be extended by three months at the initiative of the European Parliament or of the Council.7.If, on expiry of the period referred to in paragraph 6, neither the European Parliament nor the Council has objected to the delegated act, it shall be published in the Official Journal of the European Union and shall enter into force on the date stated therein. The delegated act may be published in the Official Journal of the European Union and enter into force before the expiry of that period if the European Parliament and the Council have both informed the Commission of their intention not to raise objections.8.If either the European Parliament or the Council objects to the delegated act within the period referred to in paragraph 1, it shall not enter into force. In accordance with Article 296 TFEU, the institution which objects shall state the reasons for objecting to the delegated act.

Article 48Committee procedure1.The Commission shall be assisted by the European Securities Committee established by Commission Decision 2001/528/ECCommission Decision 2001/528/EC of 6 June 2001 establishing the European Securities Committee (OJ L 191, 13.7.2001, p. 45).. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011 of the European Parliament and of the CouncilRegulation (EU) No 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by Member States of the Commission’s exercise of implementing powers (OJ L 55, 28.2.2011, p. 13)..2.Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.

Article 49Amendment to Regulation (EU) 2019/2088In Article 13 of Regulation (EU) 2019/2088, the following paragraph is added:"3.Where a financial market participant or a financial adviser issues and discloses to third parties an ESG rating, as defined in Article 3, point (1), of Regulation (EU) 2024/3005 of the European Parliament and of the CouncilRegulation (EU) 2024/3005 of the European Parliament and of the Council of 27 November 2024 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities, and amending Regulations (EU) 2019/2088 and (EU) No 2023/2859 (OJ L, 2024/3005, 12.12.2024, ELI: http://data.europa.eu/eli/reg/2024/3005/oj)."., as part of its marketing communications, it shall include on its website the same information as that required by point 1 of Annex III to that Regulation and it shall disclose in those marketing communications a link to those website disclosures.The ESAs shall, through the Joint Committee, develop draft regulatory technical standards to specify the information referred to in the first subparagraph of this paragraph, taking into account the information already disclosed pursuant to Article 10 of this Regulation.The ESAs shall submit the draft regulatory technical standards referred to in the second subparagraph to the Commission.Power is delegated to the Commission to supplement this Regulation by adopting the regulatory technical standards referred to in the second subparagraph of this paragraph, in accordance with Articles 10 to 14 of Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010.

----------------------

Regulation (EU) 2024/3005 of the European Parliament and of the Council of 27 November 2024 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities, and amending Regulations (EU) 2019/2088 and (EU) No 2023/2859 (OJ L, 2024/3005, 12.12.2024, ELI: http://data.europa.eu/eli/reg/2024/3005/oj).".

Article 50Amendment to Regulation (EU) 2023/2859In Part A of the Annex to Regulation (EU) 2023/2859, the following entry is added:"20.Regulation (EU) 2024/3005 of the European Parliament and of the Council of 27 November 2024 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities, and amending Regulations (EU) 2019/2088 and (EU) No 2023/2859 (OJ L, 2024/3005, 12.12.2024, ELI: http://data.europa.eu/eli/reg/2024/3005/oj).".

TITLE VTRANSITIONAL AND FINAL PROVISIONS

Article 51Transitional provisions1.ESG rating providers which operated in the Union at the date of entry into force of this Regulation shall notify ESMA by 2 August 2026 if they wish to continue operating in the Union and apply for authorisation or recognition in accordance with Title II. In that case, they shall apply for authorisation or recognition within four months of 2 July 2026. In the absence of such an application to ESMA within that four-month period, they shall cease their activities.2.After notifying ESMA pursuant to paragraph 1, the ESG rating provider shall be temporarily listed in the register referred to in Article 14 and be permitted, until its application has been approved or denied, to continue operating in the Union, and may endorse an ESG rating provided by an ESG rating provider established outside the Union and belonging to the same group under Article 11.3.By way of derogation from paragraph 1 of this Article, ESG rating providers categorised as small ESG rating providers, within the meaning of Article 5(1), which operated in the Union at the date of entry into force of this Regulation shall notify ESMA in accordance with Article 5 no later than 2 November 2026 if they wish to continue operating in the Union. In the absence of such notification by that date, they shall cease their activities.

Article 52Review1.The Commission shall evaluate the application of this Regulation by 2 January 2029.2.The Commission shall present a report on the main findings of the evaluation to the European Parliament and the Council. In carrying out the evaluation, the Commission shall take into account market developments and the relevant evidence at its disposal. The report shall in particular assess the following:(a)the impact of this Regulation on the transition to a sustainable economy, on the gap of investments needed to meet the Union climate targets as set out in Regulation (EU) 2021/1119, and on redirecting private capital flows towards sustainable investments;(b)the impact of this Regulation on the market structure, including the evolution of the number and diversity of ESG rating providers;(c)whether the scope of this Regulation is appropriate to achieve its objectives in accordance with Article 1, including whether providers of data products on environmental, social and human rights, and governance factors should be included in the scope of this Regulation;(d)the adequacy of the requirements for ESG rating providers established outside the Union to operate in the Union;(e)the functioning of the market of ESG rating providers in the Union, including potential conflicts of interest, and its supervision by ESMA;(f)whether this Regulation, including the non-interference principle referred to in Article 28, have contributed to improving the quality and reliability of ESG ratings and reduced the use of misleading ESG ratings.3.Where the Commission finds it appropriate, the report shall be accompanied by a legislative proposal for amendment of the relevant provisions of this Regulation.

Article 53Entry into force and applicationThis Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.It shall apply from 2 July 2026.

This Regulation shall be binding in its entirety and directly applicable in all Member States.Done at Strasbourg, 27 November 2024.For the European ParliamentThe PresidentR. MetsolaFor the CouncilThe PresidentBóka J.ANNEX IINFORMATION TO BE PROVIDED IN THE APPLICATION FOR AUTHORISATIONAn application for authorisation shall contain all of the following information:(a)the full name of the applicant, the address of its registered office within the Union, the applicant’s website and, where available, the applicant’s legal entity identifier (LEI);(b)the name and contact details of a contact person at the applicant;(c)the legal status of the applicant;(d)the ownership structure of the applicant;(e)the identity of entities within the ownership structure of the applicant that will provide ESG ratings or any of the activities listed in Article 16(1);(f)the identity of the members of the senior management of the applicant and their level of qualification, experience and training;(g)the number of rating analysts, employees and other persons working for the applicant who are directly involved in ESG rating activities, and their level of experience and training;(h)the expected market coverage of ESG ratings;(i)a description of the procedures and methodologies used to issue and review ESG ratings implemented by the applicant, whether the applicant expects to use information disclosed under Regulation (EU) 2019/2088 and Directive 2013/34/EU, and whether the applicant expects to use methodologies that are based on scientific evidence and takes into account the targets and objectives of the Paris Agreement or any other relevant international agreements;(j)the policies or procedures implemented by the applicant to identify, manage and disclose any conflicts of interest as referred to in Article 15 of this Regulation;(k)where applicable, documents and information related to any existing or planned outsourcing arrangements for activities covered by this Regulation;(l)where applicable, information about other activities, including expected endorsement, carried out by the applicant, or which the applicant intends to carry out;(m)where applicable, information about the specific measures implemented by the applicant as referred to in Article 16(2) and (3) of this Regulation;(n)where applicable, information about previous ESG rating activities.ANNEX IIORGANISATIONAL REQUIREMENTS1.Record keeping informationESG rating providers shall keep records of all of the following:(a)for each ESG rating, where applicable:(i)the identity of the rating analysts participating in the determination of the ESG rating, the identity of the persons who have approved the ESG rating, information as to whether the ESG rating was solicited or unsolicited, and the date on which the ESG rating action was taken;(ii)the identity of the persons responsible for the development of the rule-based methodology, and the identity of the persons who have approved the rating methodology;(b)the account records relating to fees received from any rated item or issuer of the rated item or related third party or any user of ESG ratings;(c)the account records for each user of ESG ratings;(d)the records documenting the established procedures and rating methodologies used by the ESG rating provider to determine ESG ratings;(e)the internal records and external communications and files, including non-public information and work papers, used to form the basis of any ESG rating decision taken;(f)records of the procedures and measures implemented by the ESG rating provider to comply with this Regulation;(g)the methodology used for the determination of an ESG rating;(h)changes in, or deviations from, standard procedures and methodologies;(i)all documents relating to any complaint, including those submitted by a complainant.2.OutsourcingWhere ESG rating providers outsource to a service provider functions or any relevant services or activities in the provision of an ESG rating, the ESG rating provider shall ensure that the following conditions are met:(a)the service provider has the ability, capacity, and any authorisation required by law, to perform the outsourced functions, services or activities reliably and professionally;(b)the ESG rating provider takes appropriate action if it appears that the service provider might not be carrying out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;(c)the ESG rating provider retains the necessary expertise to supervise the outsourced functions effectively and to manage the risks associated with the outsourcing;(d)the service provider discloses to the ESG rating provider any development that might have a material impact on its ability to carry out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;(e)the ESG rating provider is able to terminate the outsourcing arrangements where necessary;(f)the ESG rating provider takes reasonable steps, including contingency plans, to avoid undue operational risk related to the participation of the service provider in the ESG rating determination process.ANNEX IIIDISCLOSURE REQUIREMENTS1.Minimum disclosures to the publicIn accordance with Article 23 of this Regulation, ESG rating providers shall, at a minimum, disclose to the public on their website and through the European single access point (ESAP) the following:(a)an overview of the rating methodologies used and changes thereto, including whether analysis is backward-looking or forward-looking and the time horizon covered;(b)the industry classification used;(c)an overview of data sources, including whether data is sourced from sustainability statements required under Directive 2013/34/EU or from information disclosed under Regulation (EU) 2019/2088 and whether sources are public or non-public, and an overview of data processes, estimation of input data in case of unavailability and frequency of data updates;(d)the ownership structure of the ESG rating provider;(e)information on whether and how the rating methodologies are based on scientific evidence;(f)information on the ESG rating’s clearly defined objective and marking whether the rating is assessing risks, impacts, or both, according to the double materiality principle, or any other dimensions, and in the case of double materiality the proportion of the risk and impact materiality;(g)the ESG rating’s scope, namely, whether it covers an individual E, S, or G factor or whether it is an aggregated rating aggregating E, S and G factors, or whether it covers specific issues such as transition risks;(h)in the case of an aggregated ESG rating, the weighting of the three overarching E, S and G categories of factors (for example 33 % for the E factor, 33 % for the S factor, 33 % for the G factor), and the explanation of the weighting method, including weight per individual E, S and G category;(i)within the E, S or G factors, specification of the topics covered by the ESG rating, and whether they correspond to the topics from the sustainability reporting standards developed pursuant to Article 29b of Directive 2013/34/EU;(j)information on whether the rating is expressed in absolute or relative value;(k)where applicable, reference to the use of artificial intelligence in the data collection or rating process including information about current limitations and risks of using artificial intelligence;(l)general information on criteria used for establishing fees charged to clients, specifying the various elements taken into consideration, and general information on the business/payment model;(m)any limitation in data sources and methodologies used for the construction of ESG ratings;(n)the main risks of conflicts of interest and the steps taken to mitigate them;(o)if an ESG rating of a rated item covers the E factor, information on whether that rating takes into account the targets and objectives of the Paris Agreement or any other relevant international agreements;(p)if an ESG rating of a rated item covers the S and G factors, information on whether that rating takes into account any relevant international agreements;(q)any limitation on the information available to ESG rating providers.2.Additional disclosures to users of ESG ratings and rated items within the scope of Directive 2013/34/EUIn accordance with Article 24 and in addition to the minimum disclosures to the public referred to in point 1 of this Annex, ESG rating providers shall make available the following information to users of ESG ratings, rated items and issuers of a rated item, if applicable, that are the subject of such rating:(a)a more granular overview of the rating methodologies used and changes thereto, including:(i)where applicable, scientific evidence and assumptions on which the ratings are based;(ii)the relevant key performance indicators per E, S and G factor, and weighting method;(iii)in the case of an aggregated ESG rating, the result of the assessment for each E, S and G category of factors, presented in a manner that ensures comparability of the E, S and G category;(iv)any potential shortcomings of methodologies, and the measures taken to address those shortcomings;(v)policies for the revision of methodologies;(vi)when an ESG rating has been upgraded or downgraded due to any material changes to rating methodologies, models, key rating assumptions or data sources (including estimates), the reasons for those changes and their implications for the given rating;(vii)date of the last revision of methodologies;(viii)where the ESG rating covers the E factor, whether and to what extent the ESG rating is correlated with the percentage of taxonomy-alignment under Regulation (EU) 2020/852, or aligned with other international agreements, together with an explanation of any significant deviations therefrom;(b)a more granular overview of data processes, including:(i)a more detailed explanation of data sources used, including whether public or non-public, whether subject to assurance engagement, and whether derived from the sustainability reporting standards developed pursuant to Articles 19a and 29b of Directive 2013/34/EU concerning sustainable economic activities and disclosure of information pursuant to Regulation (EU) 2020/852 and Regulation (EU) 2019/2088, including whether and how information on companies’ transition plans derived from such sustainability reporting standards is used;(ii)where applicable, the use of estimation and industry average and explanation of the underlying methodology;(iii)the policies for updating data and revising historical data, and the date of last updates of data;(iv)data quality controls, their frequency and the remediation process if issues arise;(v)where applicable, any steps taken to address limitations in data sources;(c)where applicable, information about engagement with rated items and issuers of rated items, including whether on-site reviews or visits have been performed by the ESG rating provider and at what frequency;(d)where an ESG rating provider issues an unsolicited rating, a prominent statement to that effect in the ESG rating, including information on whether the rated item or a related third party has been informed that it would be rated, whether it participated in the rating process and whether the ESG rating provider had access to the management and relevant internal documents of the rated item or a related third party;(e)where applicable, an explanation of any artificial intelligence methodology used in the data collection or rating process;(f)in the case of major new information in respect of a rated item that has the possibility to affect the result of an ESG rating, ESG rating providers shall explain how they have taken that information into account and whether they have amended the corresponding ESG rating;Where applicable, the information referred to in point 2 of this Annex shall be specific to each ESG rating distributed.

Amendments and corrections
July 2, 2026	Application - See Art 53
January 1, 2025	Entry into force - Date pub. +20 See Art 53

Regulation (EU) 2024/3005 of the European Parliament and of the Council of 27 November 2024 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities, and amending Regulations (EU) 2019/2088 and (EU) 2023/2859 (Text with EEA relevance)