Skip to main content
The EU ESG Ratings Regulation: Rating Agencies Now Need Approval

The EU ESG Ratings Regulation: Rating Agencies Now Need Approval

What the EU ESG Ratings Regulation introduces — ESMA authorisation of rating providers from July 2026 — and what direct supervision means for raters and rated GCC companies.

Key takeaways
01

The EU ESG Ratings Regulation (Regulation (EU) 2024/3005) brings ESG rating providers under direct ESMA supervision.

02

From 2 July 2026, providers must be authorised by ESMA to operate in the EU.

03

It targets transparency, integrity and conflicts of interest in ESG ratings.

04

For rated companies, including in the GCC, it should mean more consistent, transparent and accountable ratings.

Introduction

ESG rating agencies have judged companies for years with little oversight of their own. That is about to change. The EU ESG Ratings Regulation makes ESG rating providers answerable to a regulator for the first time — requiring ESMA authorisation to operate in the EU from 2 July 2026. It is a watershed for the ratings industry, and it matters for the GCC companies those raters assess. With the deadline imminent, this article explains what it introduces.

What the regulation does

Published as Regulation (EU) 2024/3005 in November 2024, the regulation brings ESG rating providers under the direct supervision of the European Securities and Markets Authority (ESMA). For the first time, providing ESG ratings in the EU requires authorisation, and providers face requirements on transparency, governance, methodology disclosure and the management of conflicts of interest.

The timeline

The dates are now close:

DateWhat happens
November 2024Regulation (EU) 2024/3005 published
2 July 2026The regulation applies
2 August 2026Existing providers must notify ESMA to continue
Within 4 months of 2 July 2026Authorisation/recognition applications due

In other words, the rating agencies themselves now need approval to keep operating in the EU.

ESG rating agencies have spent years grading other companies’ governance. Now a regulator is grading theirs. That is overdue — and good for everyone the ratings affect.

Why it matters for rated GCC companies

It is tempting to see this as a problem only for the raters. It is not. For the companies that are rated — including GCC issuers and exporters assessed by MSCI, Sustainalytics, S&P and others — more transparent, accountable, conflict-managed raters mean a clearer basis on which to understand and improve their ratings. The major agencies that assess GCC companies fall within scope, so the transparency improvements flow through. Combined with why ratings diverge, it strengthens the case for managing ratings deliberately rather than reactively.

How ESGweise helps

ESGweise helps GCC companies navigate the ESG ratings landscape as it professionalises — understanding the raters that assess them, the new transparency they must provide, and how to improve ratings credibly. See our ESG Rating Improvement practice.

Conclusion

The EU ESG Ratings Regulation makes ESG rating providers answerable to ESMA, requiring authorisation to operate in the EU from 2 July 2026. The watchers are now watched — and for the GCC companies these raters assess, the result should be more transparent, consistent and accountable ratings. For any company that lives or dies by its ESG scores, it is a development worth understanding now, not after the deadline.

Frequently asked questions

What is the EU ESG Ratings Regulation?

It is Regulation (EU) 2024/3005 on the transparency and integrity of ESG rating activities, published in November 2024. It brings ESG rating providers operating in the EU under the direct supervision of the European Securities and Markets Authority (ESMA), introducing authorisation, transparency, governance and conflict-of-interest requirements for the first time.

When does the EU ESG Ratings Regulation apply?

It applies from 2 July 2026. ESG rating providers operating in the EU on 2 January 2025 must notify ESMA by 2 August 2026 if they wish to continue, and submit an application for authorisation or recognition within four months of 2 July 2026. From that point, providing ESG ratings in the EU requires ESMA authorisation.

Why does the regulation matter for companies that are rated, not just the raters?

Because it should make the ratings that judge companies more transparent, consistent and accountable. Regulated, authorised raters must disclose their methodologies and manage conflicts of interest more rigorously. For rated companies — including GCC issuers and exporters assessed by these agencies — that means a more transparent basis on which to understand and improve their ratings.

Does the EU regulation affect GCC rating agencies and companies?

It directly regulates providers offering ESG ratings in the EU, including non-EU providers serving EU users, through authorisation, endorsement or recognition routes. GCC companies are affected indirectly but materially: the major raters that assess them fall within scope, so the transparency and accountability improvements flow through to how GCC companies are rated.