EU ESG Ratings Regulation Takes Effect, Bringing Providers Under ESMA Oversight

The European Union's regulation governing ESG rating providers took effect on July 2, 2026, placing firms such as MSCI, Morningstar Sustainalytics and S&P Global under formal supervision by the European Securities and Markets Authority for the first time.

What happened

Regulation (EU) 2024/3005 entered into force in January 2025 and became applicable today, establishing the first binding EU framework for how ESG ratings are produced, disclosed and supervised. ESG rating providers operating in the EU must now seek authorisation from ESMA, which gains direct oversight of firms whose scores feed into fund labeling, index construction and stock screening across the bloc.

The rules apply to any provider distributing ESG ratings by subscription or contract to EU-regulated financial firms, companies, partnerships and limited liability partnerships, regardless of where the provider is based. A firm publishing ratings only on its own website, with no contractual relationship to EU clients, falls outside the scope.

Key dates for providers already active in the EU:

• July 2, 2026: regulation becomes applicable; ESMA supervision begins
• August 2, 2026: providers operating in the EU as of January 2, 2025 must notify ESMA to continue activities
• November 2, 2026: deadline to submit a full application for authorisation or recognition

Providers that miss these deadlines must cease EU operations.

Why it matters

ESG ratings sit behind a large share of European fund labeling and screening decisions, despite having no consistent methodology across providers. Research reviewed by the European Commission's Joint Research Centre has repeatedly found that ratings for the same company can diverge sharply between providers, since each weighs environmental, social and governance factors differently and draws on different disclosure data.

That divergence has been hard for investors to price. A fund marketed as sustainable under one rating agency's methodology can score poorly under another's, with no regulator checking either one. ESMA authorisation will not force providers to agree on methodology, but it will require disclosure of how ratings are built, conflict-of-interest controls and a supervised complaints process. This is the first time any jurisdiction has formally regulated the ESG ratings industry. EU spending on ESG data passed €1.5 billion in 2024, and the three largest providers alone cover more than 39,000 companies globally.

What to watch next

The notification and authorisation windows over the next four months will show how many providers choose to stay in the EU market rather than restructure or exit. Smaller providers focused on specific sectors, such as biodiversity or supply-chain data, face the same compliance burden as the largest incumbents, which could accelerate consolidation. The UK is moving on a parallel track, with the Financial Conduct Authority set to require its own authorisation from 2028, meaning providers serving both markets will eventually work under two separate regimes.

For investors who screen portfolios by sustainability criteria, consistent oversight should make ESG-labeled holdings easier to compare across accounts and providers. Portfolio tools that pull data across multiple brokers and asset classes make that comparison more practical when ratings sit alongside the rest of a portfolio in one place.