Decision on Disclosure of Data and Information by Banks

RS Official Gazette, Nos 103/2016 and 63/2025 Pursuant to Article 51а, paragraph 3 of the Law on Banks (RS Official Gazette, Nos 107/2005, 91/2010 and 14/2015) and Article 15, paragraph 1 of the Law on the National Bank of Serbia (RS Official Gazette, Nos 72/2003, 55/2004, 85/2005 – other law, 44/2010, 76/2012, 106/2012, 14/2015 and 40/2015 – CC decision), the Executive Board of the National Bank of Serbia adopts the following D E C I S I O N ON DISCLOSURE OF DATA AND INFORMATION BY BANKS

1. This Decision sets forth in detail the contents of data and/or information banks are required to disclose pursuant to the Law on Banks (hereinafter: the Law) and the conditions, manner and deadlines for their disclosure.
2. A bank shall disclose its business name and head office, as well as data and/or information relating to its:

1. risk management strategy and policies;
2. capital;
3. capital requirements and capital adequacy;
4. internal capital adequacy assessment process (ICAAP);
5. capital buffers;
6. risk exposures and approaches to risk measurement and/or assessment;
7. leverage ratio; 7a) liquidity coverage ratio and net stable funding ratio;
8. banking group and the relationship between the parent company and subordinated companies.

3. A bank shall regulate by an internal act detailed criteria for determining data and/or information referred to in Section 2 hereof, the manner of assessing and controlling the adequacy and accuracy of such data and/or information, and the timeliness and frequency of their disclosure, and of assessing whether this disclosure presents a comprehensive risk profile of the bank, as well as the criteria for determining data and information referred to in Section 21 hereof. Where the data and/or information referred to in Section 2 hereof do not present a comprehensive risk profile of a bank, the bank shall disclose additional information and/or data to complete the overview of its risk profile. A bank shall ensure, at least once a year, a regular independent audit of the internal act referred to in paragraph 1 hereof, as well as of the activities

2 carried out to ensure adequacy and accuracy of the data and/or information referred to in that paragraph and the timeliness of their disclosure. Data and/or information on risk management strategy and policies 4. A bank shall disclose the following data and/or information regarding the strategy and policies for managing each individual risk it is exposed or may be exposed to in the course of its operation:

1. brief description of the strategy and policies with regard to each individual risk;
2. structure and/or organisation of the risk management function;
3. scope and features of the risk reporting system, as well as the manner of risk measurement;
4. risk mitigation techniques and methods for ensuring and monitoring efficiency of risk mitigation;
5. confirmation from a bank that its established risk management system is adequate for its risk profile and business policy and strategy;
6. brief description of the correlation between the bank’s risk profile and its business strategy, as well as a brief description of the key performance indicators of the bank regarding risk management and their values, based on which interested third parties can themselves assess bank’s risk management, as well as the manner in which risk tolerance is included in the risk management system;
7. description of the manner ensuring that the bank’s managing bodies are informed about risks.

Data and/or information on bank capital 5. A bank shall disclose the following data and/or information regarding its capital:

1. amount of capital, as well as amount of Common Equity Tier 1 capital, Additional Tier 1 capital and Tier 2 capital, broken down by individual elements of capital and all deductibles;
2. description of the main features of financial instruments included in the calculation of capital;
3. data and information on matching capital items in the balance sheet with capital items in Annex 1 to this Decision, as well as data and information on differences between items in the balance sheet compiled for the needs of supervision on a consolidated basis of the banking group and items in the consolidated balance sheet compiled in accordance with the International Accounting Standards and/or International Financial Reporting Standards.
4. description of all restrictions applied when calculating capital, as well as capital instruments, regulatory adjustments and deductibles that these

3 restrictions apply to, in accordance with the decision governing capital adequacy of banks. A bank shall separately disclose the type and amount of regulatory adjustments, deductibles and items which the bank is not obliged to deduce from capital items, in accordance with the decision governing capital adequacy of banks. Where a bank discloses indicators on capital, calculated in a manner other than stipulated, it shall also disclose a detailed explanation of the manner in which these indicators were calculated. Data and/or information on capital requirements and capital adequacy 6. A bank shall disclose the following data and/or information regarding its capital requirements and capital adequacy:

1. amount of the capital requirement for credit risk, including counterparty risk, dilution risk and settlement/delivery risk to free deliveries, for each class of exposure – if a bank applies the Standardised Approach to calculate credit risk-weighted assets (hereinafter: Standardised Approach).
2. amount of the capital requirement for credit risk, including counterparty risk, dilution risk and settlement/delivery risk to free deliveries, for each class of exposure – if a bank applies the Internal Ratings Based Approach to calculate credit-risk weighted assets (hereinafter: IRB Approach), disclosing separately data and/or information for: – the retail exposure class, specifically, for retail exposures secured by mortgages on immovable property, for qualifying revolving retail exposures and exposures to small and medium-sized enterprises classified as retail exposures, in accordance with the decision governing capital adequacy of banks; – the equity exposure class, specifically, for each of the approaches specified in the decision governing capital adequacy of banks (the Simple Risk-Weight Approach, PD/LGD Approach or internal models approach), for exchange traded equity exposures, for non-exchange traded equity exposures in sufficiently diversified portfolios and other equity exposures, as well as for equity exposures to which a bank applies the Standardised Approach in accordance with the decision governing capital adequacy of banks;
3. amount of the capital requirement for settlement/delivery risk in respect of unsettled transactions;
4. amount of the capital requirement for market risks and type of approach used to calculate individual capital requirements for these risks, disclosing separately the amount of capital requirements for price risk of debt securities, capital requirements for specific price risk in respect of securitisation items, capital requirements for price risk arising from equity

4 securities, an additional capital requirement for large exposures from the trading book, capital requirements for foreign exchange risk and capital requirements for commodities risk; 5) amount of the capital requirement for operational risk and type of approach used to calculate this requirement, disclosing separately the amounts under each of the approaches a bank used to calculate the requirement; 6) bank’s capital adequacy ratios. The bank which calculates risk-weighted specialised lending exposures, in accordance with the decision governing capital adequacy of banks, by using an approach stipulated for the case when it cannot prove that its PD parameter estimates meet the minimum prescribed conditions, shall disclose all exposures classified in risk categories in accordance with that approach. The bank which calculates risk-weighted equity exposures by using the Simple Risk-Weight Approach in accordance with the decision governing capital adequacy of banks shall disclose all exposures for which it applies some of the prescribed weights. Data and/or information on internal capital adequacy assessment process 7. A bank shall disclose the following data and/or information regarding the internal capital adequacy assessment process:

1. brief description of the internal capital adequacy assessment process;
2. brief description of approaches used for measuring and/or assessing all material risks. At the request of the National Bank of Serbia, a bank shall disclose the result of the process referred to in paragraph 1 hereof, as well as additional capital requirements set by the National Bank of Serbia during prudential supervision, based on adequacy assessment and reliability of the internal capital adequacy assessment process, its consistent implementation and the result of the assessment.

Data and/or information on capital buffers 8. A bank shall disclose the following data and/or information regarding the countercyclical capital buffer:

5

1. geographical distribution of exposures significant for the calculation of the countercyclical capital buffer;
2. total amount of the bank’s countercyclical capital buffer. Data and/or information on bank’s risk exposure and approaches for risk measuring and/or assessing Credit risk

9. A bank shall disclose the following data and/or information regarding exposure to credit risk and dilution risk, as well as regarding approaches for measuring and/or assessing those risks:

1. definitions used by a bank for the concepts of exposures in default and impaired exposures for accounting purposes;
2. description of approaches and methods used for determining general and specific credit risk adjustments;
3. total amount of bank’s exposures after accounting write-offs and without taking into account the effects of credit risk mitigation techniques, and the average amount of the exposures over the period broken down by exposure classes;
4. geographical distribution of all exposures, broken down by materially significant areas, by exposure classes or more detailed, as applicable;
5. breakdown of all exposures by sector or counterparty type, by exposure classes, or more detailed, as applicable, while separately disclosing the following information in case of significant sectors and counterparties: – amounts of impaired exposures and exposures in default, – amounts of specific and general credit risk adjustments;
6. the residual maturity breakdown of all exposures, broken down by exposure classes, or more detailed, as applicable;
7. amounts of impaired exposures and exposures in default presented separately by significant geographic area, including, as applicable, the amounts of specific and general credit risk adjustments for each separate geographic area;
8. presentation of changes in specific and general credit risk adjustments for impaired exposures, including: – description of the type of specific and general credit risk adjustments, – opening balances, – amounts of determined credit risk adjustments during the period for which the disclosure is done, – amounts of provisions or reversals for estimated losses under exposures during the period for which the disclosure is done, other

6 adjustments, including those stemming from exchange rate differences, business combinations, acquisition or disposal of participation in subsidiaries and transfer between credit risk adjustments, – closing balances; 9) distribution of exposures by category of classification, type of counterparty, as well as data on calculated and required reserve. Specific credit risk adjustments and reversals presented directly in the income statement – are disclosed separately. 10. If a bank applies the Standardised Approach, it shall disclose, in addition to the data and information referred to in Section 9 hereof, also the following data and/or information for each class of exposure:

1. the name of a chosen rating agency or export credit agency, as well as the reasons for any change in the selection of the agency;
2. classes of exposure for which credit ratings of each chosen rating agency or export credit agency are used;
3. description of procedures pertaining to application of issuer’s credit rating or issued financial instruments of the issuer for certain non￾trading book positions;
4. distribution of credit ratings of the chosen rating agency and export credit agency into relevant credit quality steps;
5. values of exposure before and after the use of credit protection for each credit quality step, including exposures which represent deductibles from capital.

11. If a bank applies the IRB Approach, it shall disclose, in addition to the data and/or information referred to in Section 9 hereof, also the following data and/or information:

1. consent of the National Bank of Serbia for the use of the IRB Approach, including consent to sequential introduction of this Approach for different classes of exposure, as well as sequential transition, in accordance with the decision governing capital adequacy of banks, from the FIRB Approach to the AIRB Approach for classes of exposure to central governments and central banks, companies and banks;
2. an explanation and review of: – the structure of the internal rating system and relation between internal and external ratings, – the use of internal estimates for purposes other than for calculating credit risk-weighted assets, – the procedures for managing and recognising credit risk mitigation techniques,

7 – control mechanisms for rating systems validation, including the description of integrity, accountability and validation of such systems; 3) description of the use of internal ratings for the following exposure classes: – central governments and central banks, – banks, – companies, including small and medium-sized enterprises within this class, specialised lending and exposures arising from purchased receivables, – retail, with information on retail exposures secured by mortgages on immovable property, qualifying revolving retail exposures, as well as exposures to small and medium-sized enterprises classified as retail exposures in accordance with the decision governing capital adequacy of banks, – equity exposures; 4) the exposure values for each of the exposure classes. Exposures to central governments and central banks, banks and companies where a bank uses own estimates of LGDs or conversion factors for the calculation of credit risk-weighted assets, shall be disclosed separately from exposure classes for which a bank does not use such estimates; 5) total exposures (the sum of outstanding claims and unfunded commitments), the exposure-weighted average LGD in percentage for a bank using own LGD estimates, exposures for each relevant geographic area of credit exposures, the exposure-weighted average risk weight and, if using own estimates of conversion factors, unfunded commitments under lines of credit and other lending, as well as exposure-weighted average amount of funded commitments – for each of the following exposure classes: central governments and central banks, banks, companies and equity, for a sufficient number of risk categories under each class (including categories with default status), to allow for a clear differentiation between credit risk levels; 6) for the retail exposure class, in particular for retail exposures secured by mortgages on immovable property, qualifying revolving retail exposures and exposures to small and medium-sized enterprises classified as retail exposures in accordance with the decision governing capital adequacy of banks (as applicable, exposures on a pooled basis), or an analysis of exposures (outstanding claims and unfunded commitments) against a sufficient number of expected loss grades to allow for a clear differentiation of a credit risk level (as applicable, exposures on a pooled basis); 7) amount of specific credit risk adjustments in the preceding period for each exposure class (and, in case of the retail class, and in particular for each of the subclasses of exposures set out in provision 6) of this paragraph) and how they differ from past experience;

8 8) description of the factors that impacted on the loss experience in the preceding period (for example, has a bank experienced higher than average default rates, or higher than average LGDs or conversion factors); 9) the bank’s estimates of expected losses against actual losses over a longer period. At a minimum, this shall include data and/or information on estimates of losses against actual losses in each exposure class (for retail, and in particular for each of the types of exposures as set out in provision 6) of this paragraph), over a period sufficient to allow for a meaningful assessment of the performance of the internal ratings. Where appropriate, this should be further decomposed to provide analysis of PD also for banks using own estimates of LGDs and/or conversion factors. Description of the use of internal ratings referred to in paragraph 1, provision 3) of this Section shall contain the following data and/or information:

1. types of exposure included in each exposure class;
2. definitions, methods and data used for estimation and validation of PD, including assumptions employed in the calculation of this parameter;
3. definitions, methods and data used for estimation and validation of LGD and conversion factors, including assumptions employed in their calculation, where a bank uses own estimates of these parameters;
4. descriptions of material deviations of the bank’s definition of default status from the definition stipulated by the decision governing capital adequacy of banks, specifying classes and/or sub-classes of exposure affected by material deviations. A bank shall disclose the exposure values from the specialised lending sub-class which do not meet the requirements for use of own PD estimates and describe the method of assessment of these values.

12. If a bank uses credit risk mitigation techniques, it shall disclose, in addition to data referred to in Section 9 and Sections 10 and/or 11 hereof, also the following data and/or information:

1. internal acts governing the valuation and management of credit protection instruments;
2. methods of balance sheet and off-balance sheet netting and to which extent a bank uses these forms of netting;
3. description of the main types of funded credit protection instruments used by a bank;
4. presentation of the main types of providers of credit protection deriving from a guarantee or credit derivative as well as their credit quality;
5. presentation of market or credit risk concentrations within the credit risk mitigation techniques used;

9 6) total value of exposure (after netting) secured by eligible financial collateral or other eligible collateral, per class of exposure, after application of volatility factors – if a bank implements the Standardised Approach or IRB Approach without using own estimates for LGD parameters and conversion factors. If a bank applies the IRB Approach, for the equity exposure class it shall disclose the total value of exposure referred to in paragraph 1, provision 6) of this Section for each of the approaches it uses for the calculation of credit-risk weighted assets. Counterparty risk 13. A bank shall disclose the following data and/or information regarding its exposure to counterparty risk, as well as regarding the approaches for measuring and/or assessing that risk:

1. description of methods for allocation of internal capital and assignment of credit limit for counterparty risk exposures;
2. collateral management and exposure value adjustment based on counterparty risk;
3. description of estimate and control of correlation risk;
4. estimated amount of collateral it would have to provide to a counterparty in case of a downgrade in its own credit rating;
5. gross positive fair value of contracts, netting benefits, net current exposure to counterparty risk, value of collateral and net exposure arising from credit derivatives (taking into account positive effects of netting and collateral);
6. value of exposure to counterparty risk in accordance with methods for the calculation of this amount set out by the decision governing capital adequacy of banks;
7. notional values of credit derivative hedges and the distribution of current exposures by type;
8. notional values of credit derivatives (disclosing separately the positions held by a bank in its own name and for its own account and positions held by a bank in its own name but for the account of its clients), shown by type of derivatives and, within them, by credit derivative hedges bought and sold;
9. estimated value of α parameter if a bank obtained prior consent of the National Bank of Serbia to estimate this value. Market risks

14. If a bank applies the internal models approach for the calculation of capital requirements for market risks, it shall disclose:

10

1. for each portfolio: characteristics of the model used, description of stress tests, as well as the description of methods used for back testing and validation of internal models and modelling processes;
2. framework for application of the internal model for the use of which it obtained the consent of the National Bank of Serbia;
3. as applicable, for internal models for incremental default and migration risk, as well as for internal models for correlation trading, the methods applied and risks measured through the application of internal models, including the description of the bank’s approach to determine liquidation periods, method applied to estimate capital requirements in accordance with the standards of conservative banking and approach used for model validation;
4. description of methods for aligning with the requirements for inclusion of positions in the trading book and valuation of these positions;
5. the highest, the lowest and the mean of the daily VaR parameter and stressed VaR parameter over the reporting period, as well as amounts of these parameters calculated as per the period end;
6. the highest, the lowest and the mean value of the last estimate of incremental default and migration risk, as well as the last estimate of risk of the correlation trading portfolio over the reporting period and as per the period end;
7. weighted average of the liquidation period for each sub-portfolio covered by internal models for incremental default risk, migration risk, as well as correlation trading;
8. a comparison of the daily end-of-day VaR measures to the one￾day changes of the portfolio’s value by the end of the subsequent business day, together with an analysis of any important overshooting during the reporting period. Operational risk

15. If a bank applies the Advanced Approach for the calculation of capital requirements for operational risk, it shall disclose the following data and/or information:

1. consent of the National Bank of Serbia for the use of the Advanced Approach;
2. description of the approach, including the description of relevant internal and external factors;
3. description of the use of insurance and other mechanisms for risk transfer with the aim of mitigating this risk.

11 If a bank applies a combination of different approaches for the calculation of capital requirements for operational risk, it shall disclose the framework for the application of each of the approaches used. Interest rate risk from positions in the non-trading book 16. A bank shall disclose the following data and/or information regarding its exposure to interest rate risk from positions in the non-trading book, as well as regarding the approaches for measuring and/or assessing that risk:

1. sources of this risk and frequency of its measurement;
2. main assumptions for measuring and/or assessing exposure to this risk, including assumptions on early loan repayments and behaviour of non-maturity deposits;
3. changes in revenues, economic value or other factor (per currency) which managing bodies use to identify interest rate shocks and/or manage such shocks in line with the method established for measuring interest rate risk. Exposures in the form of securitisation positions

17. A bank shall disclose the following data and/or information regarding securitisation exposures and, as applicable, separately for the trading book and the non-trading book:

1. description of bank’s objectives regarding securitisation;
2. characteristics of other risks, including liquidity risk, associated with securitisation assets;
3. type of risk per order of collection of underlying securitisation positions and underlying assets (hereinafter: underlying assets) held for re￾securitisation;
4. different roles of a bank in securitisation and its participation within each of the roles;
5. description of established processes to monitor changes in credit and market risks under securitisation positions, including the manner in which the underlying assets affect securitisation exposures and description of the manner of applying these processes to re-securitisation exposures;
6. description of bank’s policy determining the risk mitigation method under retained securitisation positions and re-securitisation positions, while highlighting materially significant counterparties per type of exposure;
7. method which a bank applies to calculate risk-weighted securitisation exposures, including the types of exposures to which each individual approach is applied;
8. type of securitisation entities which the bank sponsor uses for securitisation of third party’s exposures, including data on whether and in

12 which form a bank has exposures towards such entity, separately for balance sheet and off-balance sheet exposures, as well as the list of entities which a bank manages or advises, which invest in securitisation positions by a bank or in securitisation positions of the securitisation entities for which a bank acts as a sponsor; 9) description of accounting policies which a bank applies for securitisation activities, including the description of: – treatment of transactions associated with securitisation positions, paying attention whether such transactions are treated as sale or financing; – recognition of profit from sale, – methods, basic assumptions, data and changes from the preceding period of estimating the value of securitisation positions, – treatment of synthetic securitisation, if not covered by another accounting policy, – manner of estimating the value of assets to be subject to securitisation and whether they are recorded in the trading book or in the non￾trading book, – policies for recognising liabilities in the balance sheet of a bank for the provisions of the contract under which a bank would be obliged to provide financial support for securitisation assets, 10) business name of the selected rating agency whose credit rating assessment a bank uses regarding securitisation and all types of exposures for which the assessments of the agency are used; 11) as applicable, description of the Internal Assessment Approach, including the structure of the internal assessment process and the link between internal assessment and external ratings, and the use of internal assessment for purposes other than capital requirements identification; control mechanisms of the internal assessment process, including the presentation of integrity, accountability and verification of the process, type of exposure to which this process is applied and stress factors used to identify an increase in credit quality, per type of exposure; 12) the following information and/or data, for each type of exposure, per type of exposure, separately for the trading book and the non-trading book: – total value of outstanding securitisation exposures of a bank, separately for traditional and synthetic securitisations and securitisations where a bank only acts as the sponsor, – total amount of assets to be subject to securitisation, – for securitisation exposures containing the early repayment clause – aggregate amount of drawn exposures ascribed to the share of originator and/or investor, the aggregate capital requirements of a bank per share of originator and the aggregate capital requirements of a bank per share of investors in drawn amounts and undrawn credit lines,

13 – amount of securitisation positions which are deductibles from capital, and/or to which credit risk weight of 1.250% is applied, – description of activities associated with securitisation during the ongoing period, including the amount of securitisation exposures, as well as amounts of recognised profits or losses from sale; 13) the following information and/or data, separately for the trading book and the non-trading book: – total amount of retained or purchased securitisation positions and related capital requirements, broken down by securitisation positions and re-securitisation positions, and further broken down into an appropriate number of classes per risk weight or amount of capital requirements for all approaches applied to calculate capital requirements, – total amount of retained or purchased re-securitisation positions, broken down by exposure before and after protection, and/or insurance and the value of exposure to guarantors broken down by category of credit quality of guarantor and/or by name of guarantor; 14) for the non-trading book, and in respect of securitisation exposures of a bank – the amount of impaired securitisation exposures, securitisation exposures in default and the amount of losses recognised by a bank during the ongoing period, broken down by type of exposure; 15) for the trading book – the total amount of outstanding securitisation exposures of a bank which are subject to the calculation of capital requirements for market risk, broken down by exposure per traditional and synthetic securitisation, 16) as applicable, data on whether a bank provides support to securitisation within the meaning of the decision governing capital adequacy of banks, and the impact of such support on bank’s capital. Where significant changes of the amount referred to in paragraph 1, provisions 13) to 15) occur from the period of the previous disclosure, a bank shall disclose the explanation of such changes. Equity exposures in the non-trading book 18. A bank shall disclose the following data and/or information regarding equity exposures in the non-trading book:

1. the differentiation between exposures based on their objectives, including for capital gains relationship and strategic reasons;
2. an overview of accounting policies and valuation methods employed, including key assumptions and approaches affecting valuation, as well as any significant change thereof;
3. book values, fair values and, for exchange-traded equities, a comparison to the market price where it is materially different from the fair value;

14 4) type, nature and values of exposure on exchange-traded equity investments, non-exchange traded equity investments in sufficiently diversified portfolios, and other equity investments; 5) total realised gains/losses for the preceding period arising from sale or closing of positions referring to equity investments; 6) total unrealised gains/losses, total latent revaluation gains/losses, as well as their amounts included in the calculation of Tier 1 capital or Tier 2 capital. Leverage ratio 19. A bank shall disclose the leverage ratio, calculated in accordance with the decision governing the capital adequacy of banks. Liquidity coverage ratio and net stable funding ratio 19а. A bank shall disclose the liquidity coverage ratio and net stable funding ratio, calculated in accordance with the decision governing the liquidity risk management for banks. Data and/or information on a banking group and the relationship between the parent company and subordinated companies 20. A bank shall disclose the following data and/or information regarding a banking group and the relationship between the parent company and subordinated companies:

1. overview of differences between reports compiled for the needs of supervision of a banking group on a consolidated basis and consolidated financial reports compiled in accordance with the International Accounting Standards and/or International Financial Reporting Standards, except for differences referred to in Section 5, paragraph 1, provision 3) hereof, with a brief description of the following group members: – to which the full consolidation method was applied, – to which the proportionate consolidation method was applied, – which have been excluded from consolidation because the bank’s participation in the capital of these legal entities represents a deductible from the capital of the banking group;

• which have been excluded from consolidation and do not represent a deductible from the capital of the banking group;

2. any existing or potential significant legal or other obstacle to timely transfer of capital or settlement of liabilities between the parent company and subordinated company. Exception from the disclosure obligation

15 21. By way of exception, if certain data and/or information referred to in Section 3, paragraph 2, Section 4 and Sections 7-20 hereof are not materially significant or represent a banking secret, and/or if their disclosure could negatively affect the bank’s competitive position in the market, a bank is not required to disclose them. The data and information not materially significant shall mean data and information whose disclosure or presentation could not affect the assessment or decision making of a person in a business relationship with a bank. A bank which did not disclose data and/or information referred to in paragraph 1 of this Section shall disclose the fact that such data and/or information are not disclosed, as well as the general information and reasons behind its judgement that those data and/or information are not materially significant, that they represent a banking secret and/or that they may negatively affect the bank's competitive position in the market. Terms, manner and deadlines for disclosure of data and/or information by banks 22. A bank shall disclose data and/or information prescribed by this Decision on its website, on the home page or in the part of the website where its financial statements are published. A bank shall disclose data and/or information referred to in the following provisions:

1. Section 5, paragraph 1, provision 1) hereof – on PI–KAP form (Annex 1);
2. Section 5, paragraph 1, provision 2) hereof pertaining to financial instruments included in calculation of the bank's capital – on PI–FIKAP form (Annex 2);
3. Section 5, paragraph 1, provision 3) hereof – in accordance with the guidelines on matching items of bank’s capital from the balance sheet with items of bank’s capital from Annex 1 hereof (Annex 3);
4. Section 6 hereof – on PI–AKB form (Annex 4);
5. Section 8, provision 1) hereof – on PI–GR form (Annex 5);
6. Section 8, provision 2) hereof – on PI–KZS form (Annex 6); The content of the forms referred to in paragraph 2 of this Section is defined in Annexes 1 to 6 of this Decision which are enclosed and integral herewith.

16 A bank shall disclose data and information referred to in Sections 5, 6, 8, 19 and 19a hereof both on an individual and consolidated bases. 23. If a bank has disclosed some data and/or information prescribed by this Decision in a different manner, in accordance with other regulations, it shall be deemed to have fulfilled its disclosure obligation under this Decision provided that it has stated on its website where those data are disclosed. Paragraph 1 of this Section shall not apply to the disclosure of data and information referred to in Sections 5, 6, 8, 19 and 19a of this Decision. 24. A bank shall disclose data and/or information prescribed hereby at least once a year – as at 31 December, by no later than 31 May of the following year. In addition to disclosures referred to in paragraph 1 of this Section, a bank shall disclose data and information referred to in Sections 5, 6, 19 and 19a hereof, as well as quantitative data and/or information relating to the IRB Approach (if applied by the bank) and credit risk mitigation techniques, as at 30 June of the current year, by no later than 30 September of the same year. A bank shall assess at least once a year whether the data and/or information referred to in paragraph 1 of this Section need to be disclosed more frequently than laid down in that paragraph and/or assess at least semi￾annually whether the data and/or information referred to in paragraph 2 of this Section need to be disclosed more frequently than laid down in that paragraph, taking into account the following data and/or information:

1. volume of business operations;
2. banking products offered to clients;
3. presence in different countries;
4. participation in the banking sector;
5. participation in the international financial markets;
6. participation in the international payment, settlement and clearing system.

25. This Decision repeals the Decision on Disclosure of Data and Information by Banks (RS Official Gazette, Nos 125/2014 and 4/2015).
26. This Decision shall enter into force on the eighth day following its publication in the RS Official Gazette and shall apply as of 30 June 2017. NBS Executive Board No 100 Chair 15 December 2016 of the Executive Board of the

17 National Bank of Serbia Belgrade Governor of the National Bank of Serbia Dr Jorgovanka Tabaković, sign.