Finanstilsynet (Financial Supervisory Authority of Norway): regulatory returns

What this page covers

Every periodic return Finanstilsynet lists for the main populations it supervises, as far as its pages describe them: 67 returns, of which 27 national (Finanstilsynet's own; group names end '(national)') and 40 EU/EEA-harmonised returns Norway collects because the underlying EU legislation has been taken into the EEA Agreement and Norwegian law (group names end '(EU, EBA)', '(EU, EIOPA)', '(EU, ESMA)'). Norway is not an EU member; it takes part through the EEA Agreement. Finanstilsynet's own page on EEA supervisory cooperation explains that the EU supervisory authorities (EBA, ESMA, EIOPA, ESRB) cannot make decisions binding directly on Finanstilsynet or Norwegian firms, because of the EEA Agreement's two-pillar structure; EU legislation must first be taken into the EEA Agreement, then into Norwegian law, before it applies, and Norway often implements a rule change later than the EU (for example, CRR3 took effect in Norway one quarter after the EU). In at least two cases found in this research Finanstilsynet applies a new EU reporting format in practice before formal Norwegian transposition is complete (the resolution-planning return RESOL1/RESOL2, and more broadly the EBA/EIOPA reporting frameworks it follows 'as far as possible, with some exceptions where new regulation is not yet taken into Norwegian law'). Research was done in Norwegian: Finanstilsynet's reporting pages exist in English only as short, high-level summaries for banking, AIFM, financial reporting, market conduct and securities markets (https://www.finanstilsynet.no/en/reporting/), each one pointing to the fuller Norwegian pages (https://www.finanstilsynet.no/rapportering/) for the actual reporting detail; those Norwegian pages, and the Norwegian regulations, laws and letters they link to or quote, were read in Norwegian (Bokmal or Nynorsk, as published) and the facts translated here into English; quotes of deadlines are close paraphrases, not literal translations. Official titles are given in `official_name` where the Norwegian differs materially from the English `name`. Anchor lists used: (1) the reporting hub https://www.finanstilsynet.no/rapportering/ and its 29 sector pages (banks, credit institutions, finance companies, life insurers, non-life insurers, pension undertakings, investment firms, fund management companies, AIF managers, payment institutions, e-money institutions, crypto-assets (MiCA), and others); (2) the 'fellesrapporteringer' (shared/common reporting) pages under that hub, over 90 of which were read or checked, each describing one return (or a small group of related modules) with who files it, deadlines, format and legal basis; (3) Finanstilsynet's technical solution pages for CRD/CRR and Solvency II XBRL reporting (which link to the EBA's and EIOPA's reporting frameworks and to Finanstilsynet's own national XBRL filing manuals); and (4) the English reporting pages, used to confirm scope and to find the non-EEA AIFMD Annex IV guidance. Covered, in priority order: banks, credit institutions and finance companies (CRR/BRRD EU returns, the 2026 migration from Altinn to the new e-Reg portal and from XBRL-XML to XBRL-CSV, and national returns such as ORBOF, the mortgage lending survey and the covered-bond Harmonised Transparency Template); then life and non-life insurers and pension undertakings (Solvency II EU returns, the SFCR and RSR, and national returns such as FORT, PORT and the pension funds' simplified solvency capital requirement); then investment firms, fund management companies and AIF managers (AIFMD Annex IV reporting including the non-EEA private placement regime, MiFIR transaction reporting, commodity derivative position reporting, and national half-yearly and quarterly returns); then payment institutions, e-money institutions, crypto-asset service providers (MiCA) and anti-money-laundering reporting by fund managers. Also covered: listed issuers' periodic financial reporting (ESEF annual reports and the KRT-1003 self-report), since Finanstilsynet collects both as part of its reporting programme even though issuers are not all financial firms. Left out, or covered only lightly: real estate agents, debt collection firms, accountants, audit firms and firms providing virtual-office services (each has its own reporting page but returns were not catalogued in depth here); statistical surveys Statistics Norway (SSB) runs jointly with Finanstilsynet (ORBOF, FORT, PORT) are recorded as returns but their code lists, templates and public datasets are hosted on ssb.no, a different host not cleared for this file and not requested; MiCA issuer prudential reporting for asset-referenced and e-money tokens (library ids eba/mica and eba/mica-of) was not found described on the pages read, only the market-abuse STOR duty for crypto-asset service providers; and whether Norway has implemented the EU Investment Firms Regulation/Directive (IFR/IFD) for investment firm prudential reporting was not confirmed (the only investment-firm-specific prudential item found was a large-exposures return being discontinued pending new rules). Source

How firms file

• e-Reg (e-Regulatory)

  Finanstilsynet's reporting portal, rolled out during 2026 to replace Altinn for most EU-harmonised returns: CRR/BRRD reporting for banks and credit institutions, Solvency II and EIOPA pension fund reporting for insurers and large pension funds, and (from 2027) the DORA register of information. Firms upload an XBRL-CSV (or XBRL-XML, during a transition period) zip file with a fixed naming structure, or in some cases use a web form. It is a login portal (rapportering.finanstilsynet.no), so it was not requested; the link is Finanstilsynet's page about it. Source

• Altinn

  Norway's shared government digital forms portal. Most of Finanstilsynet's national KRT-coded returns are filed as Altinn forms, some with an Excel or XML file attached; Altinn was also used for EU-harmonised CRR/BRRD and Solvency II returns before their move to e-Reg. It is a login portal (www.altinn.no); it was not requested, and its robots.txt and terms were not read. The link is Finanstilsynet's page about it. Source

• Transaction Reporting System (TRS)

  Finanstilsynet's own electronic system for MiFIR transaction reporting, built jointly with the supervisors of Finland, the Netherlands, Sweden and Denmark. Investment firms and trading venues send a signed XML file directly or through an Approved Reporting Mechanism (ARM) and receive a feedback file back. Also used, in a related IT system, for commodity derivative position reports. Source

Data the Finanstilsynet publishes from the returns

• Solvency and Financial Condition Reports (SFCR)

  Firm by firm · PDF

  Each insurer and insurance group must publish its own annual SFCR on its own website; Finanstilsynet's role is to receive the filed copy, not to republish it centrally. No central Finanstilsynet repository of SFCRs, equivalent to the Central Bank of Ireland's, was found on the pages read. Source

  From: KRT-1110-A

  Reuse: Published by each firm under its own terms; Finanstilsynet's general licence position (unclear, link-only) applies to Finanstilsynet's own page about the duty, not to firms' own SFCR documents.

• ESEF annual financial reports on NewsWeb

  Firm by firm · iXBRL (XHTML tagged to the ESEF taxonomy)

  Annual (and half-yearly) financial reports of issuers with Norway as home state are stored and made public on NewsWeb, Oslo Bors' officially appointed storage mechanism (OAM). NewsWeb (newsweb.oslobors.no) is a different host from the ones cleared for this file and was not requested in this session, so its structure, licence and dataset formats are not recorded here. Source

  From: ESEF

  Reuse: Not checked; NewsWeb was not requested in this session.

Reuse terms for the Finanstilsynet's documents

Finanstilsynet (Norway): no copyright or reuse terms published; the only legal page is 'Personvern, cookies og tilgjengelegheit' (privacy, cookies and accessibility), checked 13 November 2026. In the Finanstilsynet's words:

Delingstenesta på finanstilsynet.no kan nyttast til å dele artiklar frå nettstaden på utvalde sosiale medium. ('The sharing service on finanstilsynet.no can be used to share articles from the website on selected social media.') [This is the only sentence on the page about sharing content. The rest of the page covers personal data, cookies, the news alert service and accessibility. Neither this page nor any other page in the site's sitemap (https://www.finanstilsynet.no/sitemap.xml) states copyright or reuse terms for the site's content.]

Can others share copies?

Unclear.

Conditions

None stated.

What the library does

Keeps only the link, size and SHA-256 fingerprint of each document. Finanstilsynet publishes no terms for reusing or sharing the documents on its website, so the library keeps only the link, size and SHA-256.

What could not be verified

Said plainly, so nobody relies on a fact the sources do not give.

• lovdata.no (Norway's official law database): robots.txt disallows all automated access for any user agent not individually named ("User-agent: *" then "Disallow: /"), checked 2026-11-13. Not requested. Many Finanstilsynet pages link Norwegian laws and regulations (the Financial Supervision Act, the Financial Undertakings Act, the Securities Trading Act and its regulations, the CRR/CRD Regulation, and many others) on lovdata.no; those laws are named in this file's purpose/who_files text where the Finanstilsynet page stated them, but not linked, and are not used as `legal_basis` entries (unlike EUR-Lex links, which this file's `legal_basis` entries do use without being requested, following the same rule as the library's CBI file).
• ssb.no (Statistics Norway): hosts the practical reporting material (code lists, guidance, templates) and some public data for three joint returns run with Finanstilsynet - ORBOF (banks/credit institutions/finance companies), FORT (insurers) and PORT (pension undertakings). Not requested in this session (a different host, not cleared for this file; its robots.txt and terms were not read). The deadline and format for ORBOF specifically were also not stated on the Finanstilsynet page read, only on ssb.no.
• finansnorge.no (Finans Norge, the financial industry association): publishes the Harmonised Transparency Template (HTT) workbook that covered-bond issuers must use. Not requested in this session (a different host, a trade body rather than the regulator, not cleared for this file).
• dev.eiopa.europa.eu: EIOPA's Solvency II taxonomy package, annotated templates and validation rules files are hosted on this subdomain, not on the cleared www.eiopa.europa.eu. Not requested in this session; linked only in prose on the Solvens II Teknisk losning page, not reproduced as a document or URL in this file.
• newsweb.oslobors.no (Oslo Bors' NewsWeb, the officially appointed storage mechanism for issuers' periodic financial reports): not requested in this session (a different host, not cleared for this file).
• altinn.no: Finanstilsynet's own pages name dozens of Altinn form codes (KRT-xxxx) as the filing route for most national returns. Altinn itself was not requested (a login/submission portal, and a different host not cleared for this file; its robots.txt and terms were not read), so individual Altinn form URLs are not used as document or source URLs in this file; the regulator's own description of each form is used instead.
• rapportering.finanstilsynet.no (e-Reg): a login portal for the new reporting system rolling out during 2026. Not requested, per the brief's rule that login and submission portals are never requested; its root URL is recorded in `submission_systems` from Finanstilsynet's own description of it.
• Whether Norway has implemented the EU Investment Firms Regulation/Directive (IFR/IFD) for investment firm prudential reporting (library ids eba/if-class2, eba/if-class3, eba/if-grouptest, eba/if-tm) was not confirmed from the pages read. The only investment-firm-specific prudential item found was investment firms' large exposures return (KRT-1476/KRT-1477), which Finanstilsynet's CRR large exposures page says stops after reference date 30 June 2026 'pending new rules' (i pavente av nytt regelverk); no IFR-based replacement return was found described on the pages read, so it is recorded here as discontinued rather than being replaced.
• MiCA issuer prudential reporting for asset-referenced tokens and e-money tokens (library ids eba/mica and eba/mica-of) was not found described on the Finanstilsynet pages read; only the market-abuse suspicious transaction and order (STOR) reporting duty for crypto-asset service providers was found and is recorded (mica-stors).
• Several sector pages exist for populations not catalogued in depth in this file, in line with the brief's instruction to prioritise banks, then insurers/pension, then investment firms/funds/payments: real estate agency firms (eiendomsmegling), debt collection firms (inkasso), accountants (regnskapsforer) and accounting firms (regnskapsforerselskap), audit firms (revisjonsselskap) and auditors (revisor), firms providing virtual office/company services (tilbyder av virksomhetstjenester), debt information firms (gjeldsinformasjonsforetak), insurance distribution firms (forsikringsformidlingsforetak), and savings bank/finance foundations (finans- og sparebankstiftelser). Each has its own reporting page on finanstilsynet.no (read as hub pages only) but individual returns were not catalogued.
• fellesrapporteringer/ (the index page for the 'shared reporting' section) returns HTTP 404; there is no single list-of-returns page for that section, only the individual return pages themselves and the rapportering/ hub, which was used instead.
• 'Securities Trading Act section 5-12' and 'Securities Trading Regulations sections 5-9 and 5-13' (the statutory basis for issuers' periodic financial reporting deadlines and ESEF format) were named but not read in full (hosted on lovdata.no; see the lovdata.no gap above), so the exact calendar deadline for annual and half-yearly financial reports is not recorded as a specific day count.
• EBA validation rule counts for the EU-harmonised bank returns, and EIOPA validation rule counts for the Solvency II and pension EU returns, are not counted in this file; see each return's eba/<id> or eiopa/<id> library entry.
• The EBA's Guidelines on the data collection exercise regarding high earners (named on Finanstilsynet's remuneration reporting pages as the basis for KRT-1117) now redirects to an EBA account login page, checked 2026-11-13; the guideline is not linked in this file's legal_basis for eu-rem-he-ci or eu-rem-he-if because of this.

Sources

• Rapportere (reporting hub)
• Reporting (English reporting hub)
• Bankar (banks sector page)
• Kredittforetak (credit institutions sector page)
• Livsforsikringsforetak (life insurers sector page)
• Skadeforsikringsforetak (non-life insurers sector page)
• Pensjonsforetak (pension undertakings sector page)
• Verdipapirforetak (investment firms sector page)
• Forvaltningsselskap (fund management companies sector page)
• AIF-forvalter (AIF managers sector page)
• Betalingsforetak (payment institutions sector page)
• E-pengeforetak (e-money institutions sector page)
• Kryptoeiendeler (MiCA) (crypto-assets sector page)
• CRR Teknisk losning
• Solvens II Teknisk losning
• Finanstilsyn og regelverk i EOS
• Financial reporting (English)
• AIFMD Annex IV reporting (English, non-EEA AIFMs)

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. See every regulator in the regulatory returns library.