Skip to content
BOE-A-2026-22720 ·30 October 2026 ·Circular Medium impact
Corporate

Reporting entities: new consolidated regulation on the Risk Information Centre (CIR)

The Bank of Spain has approved Circular 1/2026 to consolidate all regulations applicable to the Risk Information Centre (CIR) into a single text, replacing Circular 1/2013 (sole repealing provision). This regulation aims to overcome regulatory fragmentation and strengthen legal certainty by consolidating previous amendments. The new text regulates the CIR's mission, data content, the rights of data subjects to access, rectification, and erasure (rules nineteen and twenty), and the obligation for legal entities to communicate electronically with the Bank of Spain (Law 39/2015).

In 3 key points

  1. Right of access to information for risk holders (norma decimonovena)
  2. Right to rectify or erase inaccurate or incomplete data (norma vigésima)
  3. Transitional regime applicable until 1 January 2027 for specific thresholds (disposición transitoria única)

How it affects those involved

For reporting entities, the regulation simplifies compliance by unifying credit risk reporting rules into a single regulatory body, avoiding the dispersion of previous regulations. Risk holders (individuals and companies) maintain and receive clarification on their rights to access, rectify, and erase data in cases of inaccurate or incomplete information (rules nineteen and twenty). A transitional regime for certain information thresholds is established, which will apply until 1 January 2027 (sole transitional provision).

Lifecycle

2026-10-30PublishedPublished in the BOE
Official text Based on BOE data (boe.es). Information, not advice.

Does this provision affect you?

The corporate team reviews your specific situation.

Talk to the corporate team
This analysis is informational only and does not constitute legal advice or create a client-adviser relationship. BMC.
Book your free first meeting