European Union: lending & credit regulation

Regulated

EU lending regulated via CRD/CRR banking licenses; no standalone VASP-style regime

Lead regulator: European Banking Authority (EBA) / National Competent Authorities
Also involved: National Competent Authorities (e.g., BaFin, ACPR) · EBA (prudential standards) · National Data Protection Authorities
Core law: Directive (EU) 2014/17 (MCD) & Regulation (EU) No 575/2013 (CRR)
Entry capital: €1m (Credit Institution)
Approval timeline: 12-24 months for full banking license
Customer assets: Segregated in licensed credit institution accounts
Data protection: GDPR · National Data Protection Authorities
Sandbox: Yes - National Regulatory Sandboxes

Lending in the EU is strictly regulated under the Capital Requirements Directive (CRD) and Regulation (CRR). Non-bank entities must obtain a full banking license or operate under specific national exemptions. The EBA sets prudential standards, while the Mortgage Credit Directive (MCD) governs consumer credit conduct. There is no EU-wide 'fintech license' for pure lending; entry requires national authorization.

Which licence do you need?

Your activity	Requirement	Capital	Timeline	Authority
Consumer lending	LicenceCredit Institution License / MCD Compliance Requires full banking license or specific national exemption under MCD	€1m	12-24 months	National Competent Authority
SME / commercial lending	LicenceCredit Institution License Higher capital required for non-retail focused institutions under CRR	€5m	12-24 months	National Competent Authority
Microfinance	LicenceCredit Institution License No specific EU microfinance license; falls under standard credit institution rules	€1m	12-24 months	National Competent Authority
Buy-now-pay-later	LicenceCredit Institution License Increasingly regulated under MCD and PSD2; no safe harbor	€1m	12-24 months	National Competent Authority
P2P lending platform	LicenceInvestment Firm License / Credit Institution Often classified as investment firms under MiFID II or credit institutions	€125k	6-12 months	National Competent Authority
Credit bureau / scoring	RegistrationCredit Reference Agency Registration Subject to GDPR and national credit registry rules	—	—	National Competent Authority
Debt collection	RegistrationDebt Collector License Varies by member state; often requires specific authorization	—	—	National Competent Authority

New — what changed recently

2026-01-01EBA Guidelines on Retail Diversification — Clarified proportionate diversification methods for retail exposures under CRR Article 123(1)^[1]
2026-01-01EBA Guidelines on Definition of Default — Maintained 1% net present value threshold for debt restructuring to prevent default misclassification^[2]
2025-01-01EBA Guidelines on ADC Exposures — Specified credit risk-mitigating conditions for 100% risk weight on residential property ADC exposures^[3]
2025-01-01EBA Guidelines on High Risk Exposures — Required 150% risk weight for exposures associated with particularly high risk under CRR Article 128(3)^[4]
2025-01-01EBA RTS on Off-Balance Sheet Items — Specified criteria for assigning off-balance sheet items to risk buckets under CRR^[5]

Market-entry checklist

1Obtain national banking licenseApply to your home member state's competent authority for a full credit institution license under CRD/CRR.
2Meet minimum capital requirementsEnsure initial capital of at least €1m for retail-focused institutions or €5m for others.
3Implement CRR prudential standardsAdopt EBA guidelines on risk weights, default definitions, and diversification methods.
4Comply with MCD conduct rulesAlign consumer credit practices with the Mortgage Credit Directive for transparency and affordability.
5Register as credit reference agencyIf offering credit scoring, register with national authorities and ensure GDPR compliance.

Sources

This guide is compiled automatically from 5 primary-source documents published by European Union's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.