EEE Financial Services 2026: what changes for entities with activity in Norway, Iceland and Liechtenstein

Key data

Financial entities with a presence in Norway, Iceland or Liechtenstein have a new compliance obligation from 6 February 2026. Decision No. 38/2026 of the EEE Joint Committee amends Annex IX of the EEE Agreement, relating to financial services, incorporating new European financial regulation into the legal framework of the European Economic Area.

The practical effect is clear: what was already mandatory for financial entities in the EU becomes mandatory in the three EEA countries that are not EU members. If your entity operates in those markets, the clock is already ticking.

What does this regulation establish?

The Agreement on the European Economic Area (EEA) allows Norway, Iceland and Liechtenstein to participate in the European internal market without being EU members. For this to work, the EEE Joint Committee periodically updates the annexes of the Agreement to incorporate new EU legislation.

Annex IX specifically covers financial services regulation. Whenever the EU approves new regulation in this area, the Joint Committee must decide whether to incorporate it into the EEE Agreement so that it also applies in the three non-EU countries.

Decision 38/2026, adopted on 6 February 2026 and published in the Official Journal of the EU on 21 May 2026, does exactly that: it incorporates new European financial regulation into Annex IX, ensuring that the rules of the game are the same throughout the enlarged EEA internal market.

The stated objective of this amendment is to avoid regulatory divergences between EU countries and the three EEA countries, ensuring regulatory homogeneity in the enlarged internal market.

Economic and operational impact

The impact of this decision is not punitive in nature nor does it involve new fees or direct amounts. Its effect is operational and compliance-related: financial entities that were already operating under EU regulation in their domestic markets must now verify that their subsidiaries, branches or activities in Norway, Iceland and Liechtenstein also comply with the new requirements incorporated into Annex IX.

The main vectors of operational impact are:

• Review of internal procedures: Entities must audit whether their processes in the three affected countries comply with the new incorporated regulation.
• Adaptation of contracts and documentation: Depending on the specific regulation incorporated, it may be necessary to update contracts, product sheets or regulatory documentation.
• Coordination between compliance teams: Compliance areas must synchronize the standards applicable in non-EU EEA countries with those already in force in the EU.
• Cross-border activity: Companies with financial operations that cross borders within the EEA must review whether the new regulation affects their current business flows.

Who does it affect?

This amendment to Annex IX of the EEE Agreement directly affects:

• Credit institutions (banks, savings banks, credit cooperatives) with activity in Norway, Iceland or Liechtenstein.
• Investment services companies operating in the financial markets of these three countries.
• Insurance and reinsurance entities with presence or cross-border activity in the enlarged EEA.
• Investment funds and management companies that distribute or manage assets within the enlarged EEA scope.
• Companies in any sector with cross-border financial activity within the EEA that may be affected by the incorporated regulation.
• Advisors, consultants and law firms providing regulatory compliance services to entities with presence in non-EU EEA countries.

Practical example

A Spanish banking entity with a branch in Norway operates under EU financial regulation in Spain. Until Decision 38/2026, there could be a gap between the requirements applicable in Spain and those required in its Norwegian branch, if the European regulation in question had not yet been incorporated into the EEE Agreement.

With the incorporation of the new regulation into Annex IX through this decision, the Norwegian branch is subject to the same standards as the Spanish parent company. The entity's compliance team must verify that the branch's procedures in Norway already reflect these new requirements, and if not, adapt the processes before the Norwegian supervisory authority initiates a review.

The same applies to a fund manager with activity in Iceland or an insurance company with operations in Liechtenstein: the amendment to Annex IX makes locally enforceable what was already mandatory in the EU.

What should companies do now?

1. Identify if you have financial activity in Norway, Iceland or Liechtenstein: If your entity operates in any of these three countries, this decision directly affects you. The first step is to confirm the scope of your exposure.
2. Review the full text of Decision 38/2026: Access the official text published in the Official Journal of the EU (reference OJ:L_202600965) to identify what specific financial regulation has been incorporated into Annex IX.
3. Audit compliance in the affected countries: Compare your entity's current procedures in Norway, Iceland or Liechtenstein with the new incorporated requirements. Identify possible compliance gaps.
4. Coordinate with local compliance teams: Involve the regulatory compliance managers in each affected country to adapt internal processes to the new regulation.
5. Update contracts and documentation if necessary: Depending on the regulation incorporated, it may be necessary to review contracts, product sheets, internal policies or regulatory documentation.
6. Establish a continuous monitoring process: The EEE Joint Committee periodically updates the annexes of the Agreement. Implement an alert system to detect future amendments to Annex IX that may affect your activity.