EEA credit institution branches: what the register shows and what it does not

This article is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.

What the EBA EUCLID register records and why it exists

The EBA EUCLID (EU Centralised Infrastructure for Supervisory Data) register is the central public database of credit institutions and their cross-border branches operating across the EEA. It is maintained by the European Banking Authority and populated from data supplied by national competent authorities across all 30 EEA member states.

The register exists because the EU single market framework for banking services, established under the successive Capital Requirements Directives and most recently amended by Directive (EU) 2024/1619, requires a public, centrally accessible record of which institutions are authorised and where they are operating. Without such a register, verifying the legal status of a credit institution branch operating outside its home state would require querying each host-state regulator separately, with no guarantee of consistent data or timely updates.

The passporting mechanism the register reflects is a foundational feature of the EU single market for banking. A credit institution authorised by its home-state competent authority, BaFin in Germany, the Central Bank of Ireland, De Nederlandsche Bank, and so on, acquires a passport that allows it to establish branches and provide services across all other EEA member states without seeking fresh authorisation from each host state. The host state cannot impose its own authorisation requirements; its role is to receive the passporting notification and, in defined circumstances, impose conduct-of-business requirements that supplement rather than replace home-state prudential supervision.

The register is the publicly visible record of that notification system in operation.

Branches, subsidiaries, and why the distinction matters

The register covers branches, not subsidiaries. That distinction has direct legal and supervisory consequences that are not obvious from the register itself.

A branch is not a separate legal entity. It is an operational establishment of the parent credit institution in a host member state. The branch and the parent institution are the same legal person: the branch's liabilities are the parent's liabilities, and the parent's authorisation, granted by the home-state competent authority, is what gives the branch the right to operate in the host state. Prudential supervision of the branch is the home-state competent authority's responsibility. The host-state competent authority receives the passporting notification, may impose conduct-of-business requirements, and has certain intervention powers, but it does not grant the branch its own authorisation and it does not bear primary prudential responsibility for it.

A subsidiary is an entirely separate legal entity, incorporated under the law of the host member state. It requires its own authorisation from the host-state competent authority. It is supervised by that competent authority on an individual basis, in addition to any group-level supervision by the parent's home-state or group-level supervisor. A subsidiary does not appear in the EUCLID branch register because it holds its own home-state authorisation; it would appear as a separately authorised institution in its own right.

The practical implications are significant.

Regulatory contact point: for a branch, complaints, supervisory concerns, and regulatory inquiries go primarily to the home-state competent authority, not the host-state regulator. For a subsidiary, they go to the host-state competent authority. Many counterparties misidentify which regulator to approach because they have not established whether they are dealing with a branch or a subsidiary.

Deposit guarantee scheme coverage: deposits at a branch are covered by the home member state's deposit guarantee scheme, up to the limits set by Directive 2014/49/EU on deposit guarantee schemes, not the host state's scheme. A depositor in France banking with a Lithuanian bank's French branch is covered by the Lithuanian deposit guarantee scheme. This matters in a resolution or insolvency scenario and is rarely disclosed prominently.

Insolvency jurisdiction: the insolvency of a credit institution branch is treated as the insolvency of the parent institution, governed by home-state law and supervised by home-state authorities in coordination with the relevant resolution authority. Host-state creditors have claims against the parent entity under home-state insolvency law.

What passporting covers and what it does not

Annex I to Directive 2013/36/EU lists the activities eligible for mutual recognition under the EU banking passport. These include taking deposits and other repayable funds, lending, financial leasing, payment services, issuing and administering means of payment, guarantees and commitments, trading for own account and for the account of customers in specified instruments, participation in securities issuances, money broking, portfolio management, and safekeeping and administration of securities, among others. The passporting mechanism itself is set out in Article 35 (establishment of a branch) and Article 39 (freedom to provide services) of that Directive.

A credit institution does not have to passport all of these activities. The passporting notification it submits to its home-state competent authority specifies the activities it intends to carry out in the host member state. The branch is only authorised to carry out those notified activities in the host state, not the full range of what the parent institution may be authorised to do at home.

This creates a common verification gap. Knowing that a credit institution branch is listed in the EUCLID register tells you that a passporting notification has been made. It does not tell you which activities were included in that notification. A branch notified to carry out lending and deposit-taking is not thereby authorised to provide investment services under MiFID II, even if those investment services are covered by the parent's home-state licence. Investment services passporting under MiFID II runs through a separate framework and separate notification.

For counterparty due diligence, the relevant question is not only "is this branch in the register" but "is the specific activity I am transacting in, or that this branch is marketing to me, within the scope of its passporting notification for this member state."

How the passporting notification process works

When a credit institution authorised in its home member state wishes to establish a branch in a host member state, it submits a notification to its home-state competent authority. The notification must include specified information: the host member state where the branch will operate, a programme of operations indicating the type of business and structural organisation of the branch, the address in the host member state, and the names of those responsible for managing the branch.

The home-state competent authority then has a defined period, currently three months under Article 35 of Directive 2013/36/EU, to either transmit the notification to the host-state competent authority or to refuse to do so where it has grounds to doubt the adequacy of the credit institution's administrative structures or financial situation. If the home-state competent authority transmits the notification, the branch's establishment proceeds to the host-state supervisory preparation phase described below.

Under Article 36(1) of Directive 2013/36/EU, the host-state competent authority has two months from receiving the information referred to in Article 35 to prepare for the supervision of the branch and, if necessary, to indicate the conditions under which, in the interests of the general good, the branch's activities are to be carried out in the host Member State. Once that process is complete, the branch may commence operations. The host-state competent authority cannot block the establishment of the branch; it can only impose conduct-of-business conditions within its competence.

The EUCLID register reflects the end state of that process: a branch that appears in the register for a given host member state has completed the passporting notification and has a legal basis to operate there. A credit institution providing banking services in a host member state without having completed that notification, regardless of how well established it is in its home state, does not have a legal basis to do so.

The geography of EEA credit institution branches

The branches recorded in the EBA EUCLID register reflect the structure of European banking rather than a uniform distribution of activity.

Germany, Italy, and France host the largest branch populations, consistent with their position as the EEA's largest economies and financial centres. All three attract significant branch presence from other large EEA banking systems, including Dutch, Spanish, and Nordic institutions. The Netherlands also shows a substantial branch population, reflecting its role as a hub for cross-border banking operations.

Ireland and Luxembourg show branch concentrations disproportionate to their size. Both are well-established financial centres for EU operations, attracting institutions that use them as a base for providing services across the EEA. In Ireland's case, a number of branches reflect the consolidation of EU banking operations that followed Brexit, as UK-headquartered institutions sought EEA booking entities.

Nordic member states show active cross-border branch presence, consistent with the high degree of banking integration across the Nordic-Baltic region and the presence of large Nordic banking groups with extensive EEA operations.

Iceland and Liechtenstein are EEA members through the EEA Agreement and are subject to the CRD framework. Their representation in the register depends on outbound branch notifications from institutions established in those states being reflected in the EUCLID source at the time of extraction.

Malta and Croatia have minimal branch presence as host states, consistent with their size and banking markets, which are served primarily by subsidiaries of larger European banking groups rather than branches.

What the register does not show

Understanding what is absent from the register is as important as reading what is in it.

It does not include third-country branches. A UK bank operating a branch in France following Brexit is not operating under an EEA passporting notification. It requires a separate authorisation from the French regulator (ACPR) under the third-country branch framework. Third-country branches are not in scope for EUCLID's branch register.

It does not include free provision of services notifications. A credit institution can also passport services into a host member state without establishing a physical branch, by notifying its home-state competent authority of its intention to provide services on a cross-border basis. Those notifications are not visible in the branch register; only branch establishments are recorded.

It does not include the activity scope of each branch. The register confirms presence, not the specific Annex I activities the passporting notification covers. Checking activity scope requires either consulting the home-state competent authority's public register or reviewing the notification documentation directly.

It does not reflect real-time supervisory status. A branch whose parent institution is subject to supervisory measures, capital restrictions, or licence conditions may still appear in the register. The register is not a clean bill of health; it is a record of notified presences.

How to use the register for counterparty verification

Identify the legal entity. Many credit institutions operate consumer-facing brands that differ from their registered legal name. The entity's terms and conditions, regulatory disclosures, and deposit guarantee scheme documentation should identify the legal name and home member state.

Confirm the branch entry. Search the register for the entity's name in the relevant host member state. Confirm that an entry exists and note the home member state, which determines the supervising competent authority and applicable deposit guarantee scheme.

Verify the activity scope separately. Do not assume the branch is notified for all activities. If the specific service you are using is material, such as investment services, custody, or payment services, verify that those activities are within the scope of the branch's passporting notification. The home-state competent authority's public register or the institution's own regulatory disclosures are the sources for this.

Check for cross-border service provision. If the institution is not providing services through a branch but on a cross-border basis without a physical establishment, it will not appear in the branch register at all. In that case, verification requires confirming that a services notification, as distinct from a branch notification, has been completed through the home-state competent authority.

Re-verify for significant relationships. Branch status, passporting scope, and parent institution authorisation all change. For material counterparty relationships, periodic re-verification is appropriate.

The regulatory framework the register sits within

The branch register reflects the passporting framework established under Directive 2013/36/EU (CRD IV), as amended by Directive (EU) 2024/1619. Directive (EU) 2024/1619 was published in the Official Journal on 19 June 2024 and entered into force on 9 July 2024, amending Directive 2013/36/EU as regards supervisory powers, sanctions, third-country branches, and ESG risks. Member States are required to adopt and publish transposition measures by 10 January 2026 and to apply them from 11 January 2026. Certain provisions apply later, notably the third-country branch regime in Article 1, points (9) and (13), of the amending Directive, which applies from 11 January 2027.

The CRD framework operates alongside the Capital Requirements Regulation (CRR, Regulation (EU) No 575/2013 and its amendments), which sets out the prudential requirements, covering capital, liquidity, and leverage, that apply to credit institutions across the EEA. The CRD passport authorises cross-border activity; the CRR sets the prudential conditions under which that activity must be conducted.

Credit institutions that also provide investment services passport those activities separately under MiFID II (Directive 2014/65/EU) and MiFIR. Credit institutions providing payment services do so under PSD2 (Directive (EU) 2015/2366). A branch that appears in the EUCLID register has completed CRD passporting; its authorisation to conduct investment services or payment services in the host state depends on separate notification processes under those frameworks.

For the broader supervisory architecture within which EBA and the national competent authorities operate, see ESMA, EBA, EIOPA: who does what in EU financial supervision. For how non-EU firms seek access to EU banking markets, see Non-EU firms entering the EU financial market: passporting, reverse solicitation, and third-country regimes.

Forseti monitors EU financial regulation continuously and delivers personalised impact analysis anchored to verified official sources. Start for free.