Legal
EU/UK securitization regulations
EU/UK securitization regulations
If you want European bank or insurance capital in your deal, you need to understand EU and UK securitization regulations. These rules determine whether regulated investors can buy your paper at all, and if so, at what capital charge. A deal that qualifies for Simple, Transparent and Standardised (STS) designation can reduce a bank investor’s capital requirement by 40-60%. A deal that fails basic compliance may be uninvestable for the largest pools of European capital.
This topic covers what you need to know to structure a deal that works for EU and UK regulated buyers.
The EU securitization Regulation framework
The EU Securitization Regulation (Regulation (EU) 2017/2402), effective since January 2019, governs all securitizations where at least one party is an EU-regulated institutional investor. If a European bank, insurer, asset manager, or pension fund is buying your paper, these rules apply to them.
Who is in-scope
The regulation applies to EU institutional investors, including:
- Credit institutions (banks)
- Insurance and reinsurance undertakings
- UCITS and AIFMs (fund managers)
- Institutions for occupational retirement provision (pension funds)
The key point: these rules bind the investor, not the originator. A US originator can structure a deal however they want. But if the deal doesn’t meet EU requirements, EU regulated buyers either can’t invest or face punitive capital charges.
Risk retention requirements
The originator, sponsor, or original lender must retain a material net economic interest of at least 5% of the securitization. Five retention options exist:
| Option | Description | Typical User |
|---|---|---|
| Vertical slice | 5% of each tranche | Banks with multi-tranche deals |
| Seller’s share | 5% of every securitized exposure | Asset managers, CLO managers |
| First loss | First loss tranche ≥5% of securitized exposures | Most ABF originators |
| Originator’s share | 5% random selection of equivalent exposures | Rare in practice |
| Revolving exposure | 5% of originator interest in revolving structures | Credit card, auto floorplan |
For most ABF deals, the first loss retention option works best. You’re already subordinating 5-15% to get the advance rate you need. Documenting that retained interest as regulatory risk retention is straightforward.
Note: Risk retention must be maintained for the life of the deal. If you sell your retained piece early (even due to an M&A transaction), the deal loses compliance and investors face immediate capital consequences.
Due diligence obligations
EU institutional investors must conduct and document due diligence before investing and on an ongoing basis. You need to provide them with enough information to satisfy these requirements:
Pre-investment due diligence:
- Verify risk retention is in place
- Assess credit risk characteristics of underlying exposures
- Understand structural features and cash flow mechanics
- Stress test cash flows under various scenarios
Ongoing monitoring:
- Quarterly performance data on underlying exposures
- Trigger and covenant compliance status
- Servicer and manager performance assessment
If you can’t provide the data investors need for their due diligence, they can’t invest. Build this into your reporting package from the start.
Article 7 transparency requirements
Article 7 sets out specific disclosure requirements. Originators must provide:
- Underlying exposure data at loan-level (using ESMA templates)
- Investor reports at least quarterly
- Significant event notifications
- Inside information disclosure
- Transaction documentation (prospectus, STS notification if applicable)
This data must be provided free of charge via a securitization repository registered with ESMA. The standardized templates are detailed and granular. For a consumer loan deal, you’re providing 100+ data fields per loan.
Credit-granting standards
The regulation prohibits adverse selection. You can’t cherry-pick your worst assets for securitization while keeping the good ones on balance sheet. Specifically:
- Underlying exposures must be originated in the ordinary course of business
- Underwriting standards for securitized assets must be no less stringent than for retained assets
- Material changes to underwriting criteria must be disclosed
Practically, this means maintaining consistent credit policies and being able to demonstrate that your securitized pool isn’t adversely selected versus your broader portfolio.
Simple, transparent and standardised (STS) requirements
STS is the EU’s “gold standard” designation for high-quality securitizations. Deals that qualify receive preferential regulatory capital treatment. For a bank investor, the difference between STS and non-STS capital charges can be 50%+ on the same rated tranche.
Simplicity criteria
Your deal structure must be simple:
- True sale: Legal sale of assets to the SPV (no synthetic structures for STS)
- Homogeneity: Assets must share similar underwriting, servicing, and risk characteristics (no mixed pools of auto loans and equipment leases)
- No re-securitization: Can’t securitize tranches of other securitizations
- No active portfolio management: No discretionary trading after closing
- Clean performance history: No defaulted or disputed exposures at cut-off
For ABF originators, the homogeneity requirement is usually the first checkpoint. If your platform originates multiple asset classes, you’ll need separate deals for each to qualify for STS.
Transparency criteria
Investors must have access to comprehensive information:
- Historical performance data: At least 5 years of static pool data (or 3 years with explanation for shorter track record)
- Liability cash flow model: Investors can model waterfall payments under various scenarios
- Environmental liability disclosure: For real estate or physical assets, disclosure of environmental risks
- Sample or audited data verification: Accuracy of loan-level data must be verified
The 5-year historical data requirement catches many US originators off guard. If you’re a 3-year-old company, you’ll need to explain the shorter history and may face investor skepticism about STS qualification.
Standardisation criteria
The deal must follow standard market practices:
- Risk retention documented: Clear identification of retention holder and method
- Servicing continuity: Back-up servicer or servicer replacement provisions
- Interest rate and currency hedging: Appropriate hedges for mismatches between assets and liabilities
- Priority of payments: Clear waterfall with no trapping or diversion provisions that disadvantage senior investors
- Performance triggers: Early amortization or other protective triggers based on asset performance
Third-party verification
To use the STS label, you must:
- Self-assess compliance with all STS criteria
- Notify ESMA via a standardized template
- Optionally (but practically required) engage a third-party verification agent
Third-party verification agents registered with ESMA will review your deal against all STS criteria and issue a compliance opinion. While not legally mandatory, most investors require third-party verification for STS deals. Expect to pay €25,000-75,000 for verification depending on deal complexity.
Important: Making an STS notification when the deal doesn’t comply is a regulatory offense. The originator faces fines of up to €5 million or 10% of annual turnover.
Capital benefit quantification
Here’s why STS matters in concrete terms:
| Investor Type | Non-STS Capital Charge | STS Capital Charge | Reduction |
|---|---|---|---|
| Bank (SA), AAA | 20% risk weight | 10% risk weight | 50% |
| Bank (SA), AA | 30% risk weight | 15% risk weight | 50% |
| Bank (IRB), AAA | 15% risk weight | 10% risk weight | 33% |
| Insurer (Solvency II), AAA | 2.1% spread charge | 1.0% spread charge | 52% |
For a bank buying €100 million of AAA paper under the standardized approach, the capital difference between STS and non-STS is €1.0 million vs. €2.0 million. That capital cost flows directly into pricing. STS paper typically prices 5-15 bps tighter than equivalent non-STS paper.
Post-brexit UK divergence
The UK onshored the EU Securitization Regulation at Brexit (January 2021) but has since diverged. You now have two separate regulatory regimes to consider.
Key differences between UK and EU frameworks
| Issue | EU Approach | UK Approach |
|---|---|---|
| Risk retention | 5% required | 5% required |
| STS designation | EU STS only | UK STS only |
| Cross-border recognition | No automatic UK STS recognition | No automatic EU STS recognition |
| Third-country originators | Specific requirements | More flexible approach |
| Regulatory authority | ESMA | FCA/PRA |
The most significant practical difference: EU STS and UK STS are not mutually recognized. A deal that qualifies for EU STS does not automatically qualify for UK STS, and vice versa. If you want both designations, you need two separate notifications and (practically) two separate third-party verifications.
Dual compliance requirements
For a deal targeting both EU and UK regulated investors, you need:
- Separate STS notifications to ESMA (EU) and FCA (UK)
- Data repository access in both jurisdictions
- Documentation satisfying both sets of disclosure requirements
- Two third-party verification opinions (or one agent covering both)
The incremental cost of dual STS compliance runs €30,000-50,000 in verification fees plus €20,000-40,000 in legal costs. For deals under €300 million, the economics may not support dual STS pursuit.
Practical structuring implications
When structuring for cross-border distribution:
- Choose your primary jurisdiction based on where most investor demand sits
- Build for dual compliance in documentation even if only pursuing one STS designation initially
- Use repositories with dual jurisdiction access to avoid duplicative reporting
- Engage counsel in both jurisdictions early to identify any structural issues
Note: UK investors currently accept EU STS status for capital purposes under transitional provisions. These provisions may not extend indefinitely. Check current status with UK counsel.
Compliance for non-EU/UK originators
US originators accessing European capital face specific challenges. The regulations assume a European originator. When you’re structured differently, you need workarounds.
Third-country originator considerations
The EU Securitization Regulation technically applies to EU institutional investors, not non-EU originators. But practically, EU investors can only invest if:
- Risk retention is held by someone (originator, sponsor, or original lender)
- That retention holder provides specified representations
- Due diligence information is available in compliant format
A US originator can fulfill risk retention directly. Alternatively, an EU sponsor (often a bank arranging the deal) can retain the interest. The sponsor route adds cost but may be required if the US originator’s structure doesn’t fit neatly into retention options.
Implementation options for US deals
| Approach | How It Works | Pros | Cons |
|---|---|---|---|
| Direct retention | US originator retains 5% first loss | Clean, straightforward | Must hold for deal life |
| Sponsor retention | EU bank sponsor retains 5% | No long-term hold for originator | Adds sponsor fee (5-15 bps) |
| Seller representation | Originator provides contractual reps | Flexibility | May not satisfy all investors |
Most US originators targeting EU capital choose direct retention via first loss. You’re already holding subordination for credit enhancement. Documenting it as regulatory retention requires specific representations but not structural changes.
Required representations and documentation
For US originators selling to EU investors, expect to provide:
In the offering documents:
- Identification of risk retention holder and method
- Confirmation of credit-granting standards
- Description of due diligence information availability
- Statement that originator is not using adverse selection
In investor side letters:
- Specific risk retention representations updated quarterly
- Confirmation of ongoing retention compliance
- Undertaking to notify of any retention breach
Ongoing reporting:
- Loan-level data in ESMA template format
- Quarterly investor reports with specified content
- Trigger and covenant compliance certificates
Data and reporting requirements
The Article 7 disclosure templates are EU-specific. Converting your US reporting into compliant format requires:
- Mapping your loan-level data to ESMA fields (100+ fields for most asset classes)
- Establishing data feeds to an ESMA-registered repository (or dual EU/UK repositories)
- Building quarterly reporting processes that hit mandated deadlines
Budget 3-6 months to build compliant reporting infrastructure for your first EU-distributed deal. Ongoing costs run €50,000-150,000 annually for data management and repository fees.
Practitioner checklist: EU/UK market access
Before you structure
- Determine if STS designation is worth pursuing (typical break-even: €200M+ deal size)
- Confirm asset class homogeneity for STS eligibility
- Verify you have 5 years of historical performance data (or 3 years with explanation)
- Identify risk retention approach (first loss vs. vertical vs. sponsor)
- Engage EU and/or UK securitization counsel
Documentation phase
- Include Article 7 disclosure undertakings in transaction documents
- Draft risk retention representations for offering documents
- Prepare investor side letter templates with EU/UK compliance representations
- Map loan-level data to ESMA template fields
- Select and contract with securitization repository
Pre-launch
- Engage third-party STS verification agent (if pursuing STS)
- Submit STS notification to ESMA and/or FCA
- Verify data repository access is live
- Test loan-level data reporting feed
- Prepare investor due diligence package
Ongoing compliance
- Quarterly loan-level data submission to repository
- Quarterly investor reports within mandated timeframe
- Material event notifications within required periods
- Annual confirmation of risk retention compliance
- Monitor for regulatory changes affecting compliance status
Common pitfalls for US originators
- Underestimating data requirements: ESMA templates are granular. Start data mapping early.
- Assuming STS is automatic: It requires affirmative notification and ongoing compliance.
- Ignoring post-Brexit divergence: EU and UK are separate regimes with separate costs.
- Selling retained interest: Any sale of your risk retention piece blows up compliance.
- Mixing asset classes: Homogeneity requirements preclude multi-asset pools for STS.
Cost-benefit analysis
Before pursuing EU/UK market access, run the numbers:
| Cost Item | Typical Range |
|---|---|
| EU/UK counsel (structuring) | €75,000-150,000 |
| Third-party STS verification | €25,000-75,000 per jurisdiction |
| Data repository setup | €20,000-50,000 |
| Annual repository/reporting | €50,000-150,000 |
| Sponsor retention fee (if used) | 5-15 bps annually on deal size |
Illustrative pricing. See pricing disclaimer.
For a €300 million deal, expect €200,000-350,000 in upfront costs plus €50,000-150,000 annually. The benefit: access to a deep pool of regulated capital that often prices tighter than US alternatives, particularly for AAA tranches.
STS designation adds €50,000-100,000 in costs but can improve pricing by 5-15 bps on senior tranches. On €250 million of senior paper, that’s €125,000-375,000 annually. STS typically pays for itself on deals above €200-250 million.