ECB sanctions BofA Securities Europe for market-risk reporting breach
EU banks must keep internal-model use within supervisory permission
Change
ECB imposed a €6.2 million penalty on BofA Securities Europe SA for wrongly calculating market-risk RWAs and overstating its CET1 ratio across six reporting periods.
Why it matters
ECB found that the bank included sovereign bond option positions under the internal models approach even though those positions were outside its supervisory permission. The breach caused underreported market-risk RWAs, incorrect capital-requirement calculation and an overstated CET1 ratio.
Implications
- — EU banks using internal models for market-risk capital requirements must verify that every position included is covered by supervisory permission because ECB sanctioned BofA Securities Europe for using the model outside its approved scope.
- — Regulatory reporting teams must reconcile RWA calculations against permission boundaries before submission because ECB treated six consecutive periods of understated market-risk RWAs as a severe breach.
- — Capital management teams must correct CET1 reporting when RWA inputs are understated because ECB linked the reporting breach to an overstated capital-strength ratio.
Who is affected
- — EU banks using internal models for market-risk capital requirements
- — Regulatory reporting teams at ECB-supervised banks
- — Capital management teams responsible for CET1 ratio reporting
What to watch
- — Penalty imposed: 27 March 2026
- — ECB classified the breach as severe