Since 2023, ESMA has been actively working on simplifying their disclosure requirements for securitizations. Their final consultation with market participants and interested parties closed on March 31, 2025 with a plan to publish a final report and submit draft technical standards to the European Commission for endorsement by Q2 2025. If endorsed, these will then go through parliamentary and council review. Therefore, while these are the current proposals, the final requirements and their effective date are still subject to the legislative process as discussed in more detail by Latham & Watkins(8).
Under the EU Securitization Regulation(1) (SECR), two critical segregations of transactions are discussed. Public vs. private, and EU vs. non-EU.
Public vs. Private: The key distinction between public and private deals, according to the SECR(1) is whether an EPR (EU Prospectus Regulation) compliant prospectus is required. Public transactions require such a prospectus. Private transactions generally do not. Slaughter and May(6) discuss this distinction and how the definition of public could be expanded in the future. Most US CLOs marketed to European investors fall under the "private" category.
EU (private) vs. Non-EU (private) securitizations: Securitizations are considered EU if all sell-side parties (originator, sponsor, original lender, and SSPE) are EU established. All non-EU originated securitizations with EU investors are non-EU.
CURRENT VS. PROPOSED
This Brief distills ESMA's proposed changes for reporting private EU and non-EU securitizations. Historically, reporting requirements for "private" transactions, both EU and non-EU, have been broadly the same as for their "public" counterparts with a couple exceptions, the big one being private securitizations are not required to report to a Securitization Repository (SR). ESMA's proposed changes will broaden the differences.
Asset-level Data
Current: Both EU and non-EU private deals are required to report granular, asset-class-specific data on all underlying loans and to report this data in XML format following a complex hierarchical structure.
Proposed: EU will now differ from non-EU. ESMA's Feb 2025 consultation paper(3) proposed a simplified template for EU deals (only). It's main points include:
It's expected that Non-EU securitizations will continue to report granular-level data as per the existing framework.
Significant Event Reporting
Current: For private deals, ESMA does not currently require template-based reporting of significant events.
Proposed: It's expected ESMA will extend the requirement for template-based significant event reporting to private securitizations which would add an additional layer of reporting, as noted by Hogan Lovells(5).
No Mandatory Reporting to a Securitization REPOSITORY
Current: Historically, private transactions have been exempt from the ESMA requirement to report to an SR whereas, public securitizations must. This exemption is expected to still hold according to the most recent consultation paper from ESMA(3).
Proposed: While there are no expected changes, there are ongoing discussions(5), including in the European Commission, about extending the SR reporting requirement to private deals, however in a non-public format to address confidentiality concerns.
Transparency
Current: Originators, sponsors, and SSPEs are required to make available to investors and CAs extensive information on securitizations including details about the structure of the transaction, the underlying assets, and ongoing performance.
Proposed: Expected to remain unchanged.
Investor Reports and Direct Information Provision
Current: Reports and related securitization information are to be made available directly to investors and CAs by the securitization parties.
Proposed: Expected to remain unchanged.
KEY TAKEAWAYS
CONCLUSION
Navigating ESMA's evolving reporting landscape for private securitizations is a persistent challenge, even with the proposed move towards simplification for EU transactions. While the new aggregate-level template aims to ease the burden for EU private deals, the requirement for granular data persists for non-EU securitizations and remains an "upon request" possibility for EU deals. As the regulatory environment continues to adapt, robust data engineering and automated reporting solutions remain paramount for market participants to keep costs in check while ensuring compliance and maintaining operational resilience.
The Reporting Company
Automating The Mundane
Regulatory reporting to ESMA demands asset-level granularity, mapped to thousands of taxonomy elements and delivered in XML format. It’s complex work—but not for us. We're a financial-data engineering and analytics firm specializing in turning complex manual workflows into seamless, automated processes. By combining ESMA expertise with the flexibility of our data reporting platform we’ve built ESMA Flow—a fully automated solution for turning your data into compliant reports supporting all asset classes.
Bespoke mapping?
Our speciality. You send your data files to us, we'll map and extract all the needed fields, translate to ESMA allowed values, apply NACE codes, clean, run hundreds of QA checks and custom validations, perform a little end-processing magic to transform the final data in XML format, then we send back ESMA ready reports—QA'ed, validated, and ready to share with investors and competent authorities.
Sources
1. REGULATION (EU) 2017/2402 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32017R2402
2. 21, Dec 2023 - On the securitisation disclosure templates under Article 7 of the Securitisation Regulation
3. 13, Feb 2025 - Consultation Paper on the revision of the disclosure framework for private securitisation under Article 7 of the Securitisation Regulation
4. 27, Apr 2025 - ESMA consults on private templates for Securitisation Disclosure
5. 27, Feb 2025 - ESMA CONSULTS ON SIMPLIFIED DISCLOSURE TEMPLATE FOR PRIVATE SECURITISATIONS
6. SECURITISATION REPORTING - REVISITING THE DISTINCTION BETWEEN PUBLIC AND PRIVATE SECURITISATIONS
7. 13, Mar 2025 - ESMA Propose Reforms: Simplified Disclosure for Private Securitisations
8. 20, June 2025 - In Practice: EU Proposed Securitisation Disclosure Reforms: Is the Remedy Worse Than the Affliction?
Disclaimer: Many law firms and industry participants track and analyze ESMA securitization reporting and monitoring regulations. This paper and its predecessors incorporate insights discussed in their publicly available briefings cited above. The Reporting Company is not a law firm and nothing that is cited here should be taken as legal advice. Consult with your legal counsel specializing in EU securitization law to ensure compliance with the latest regulations and interpretations.
2025 © The Reporting Company, LLC. All Rights Reserved.
The Reporting Company ("TRC") is a global platform that automates regulatory and financial reporting for originators and servicers of securitizations and applies proprietary processes, technology integrations, and AI usages to ensure accurate, fast, and reliable reporting at scale. Clients use TRC to manage the complexities of mapping and processing data in different formats and from different sources into production reports ready to deliver to investors, and other interested parties.
Privacy Policy: Last updated: April 9, 2025
We operate http://www.thereportingco.com (the "Site"). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site. We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.
Information Collection And Use: We do not collect personally identifiable information.
Cookies: Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
Changes To This Privacy Policy: This Privacy Policy is effective as of April 9, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
Contact Us: If you have any questions about this Privacy Policy, please contact us at info@thereportingco.com
2025 © The Reporting Company, LLC. All Rights Reserved.
The Reporting Company ("TRC") is a global platform that automates regulatory and financial reporting for originators and servicers of securitizations and applies proprietary processes, technology integrations, and AI usages to ensure accurate, fast, and reliable reporting at scale. Clients use TRC to manage the complexities of mapping and processing data in different formats and from different sources into production reports ready to deliver to investors, and other interested parties.
Privacy Policy: Last updated: April 9, 2025
We operate http://www.thereportingco.com (the "Site"). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site. We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.
Information Collection And Use: We do not collect personally identifiable information.
Cookies: Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
Changes To This Privacy Policy: This Privacy Policy is effective as of April 9, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
Contact Us: If you have any questions about this Privacy Policy, please contact us at info@thereportingco.com