Regulatory & Compliance
Regulatory & Compliance
Full alignment with the current regulatory framework
IORP II
Full compliance with the European Directive on Occupational Pension Funds — governance, risk management, own risk assessment.
Law 5327/2026
Amendment and supplement to the legislative framework for Occupational Pension Funds, with new provisions on governance, risk management and beneficiary protection.
Law 5078/2023
Implementation of the new legislative framework for Occupational Pension Funds in Greece, with specialized guidance at every stage.
Bank of Greece Supervision
Support in meeting supervisory obligations to the Bank of Greece — reports, indicators, reporting.
ESG & Data Security
Integration of ESG criteria in TEA management and full compliance with GDPR and data security requirements.
IORP II — Directive (EU) 2016/2341
Corporate Governance System
Own Risk Assessment (ORA)
Key Function Holders & Remuneration Policies
Member & beneficiary disclosures
Law 5327/2026 — TEA Framework Amendment
Amendment of TEA governance & operating provisions
Expanded supervisory requirements & reporting to Bank of Greece
Strengthened beneficiary protection & transparency
Alignment with recent European guidelines
OAPES — Group Occupational Pension Insurance Product (Law 5327/2026)
Registration in the Bank of Greece public register — life insurers (classes I, III, VII)
Employers join without individual supervisory approval
OAPES Key Information Document & suitability assessment
Ring-fenced management & investment sub-register per scheme
Rights portability & TEA ↔ OAPES transfers
New tax framework from 1.1.2027 (2.5%–10%)
Law 5078/2023 — New TEA Framework
TEA establishment & licensing
Minimum capital & supervisory indicators
Reporting obligations to Bank of Greece
Tax framework for contributions & benefits
Bank of Greece Supervision
Regular & ad hoc reporting
Financial & actuarial indicators
Stress testing & scenario analysis
Audit trail & internal control
ESG & Data Security
ESG criteria integration in investments
SFDR & Taxonomy Regulation
GDPR & data encryption
Cybersecurity & business continuity
DORA — Regulation (EU) 2022/2554
ICT risk management & digital operational resilience framework
Reporting of major ICT incidents to supervisory authorities
Digital operational resilience testing (TLPT)
Third-party ICT provider risk management
Information & threat intelligence sharing
Applicable to insurance companies & TEA from 17 January 2025
Cyber Insurance — Complementing DORA
24/7 First Response to incidents with no deductible
Legal guidance on breach notification obligations (GDPR)
Security & data protection liability
Network interruption, cyber extortion (ransomware) & computer fraud
Proactive Cyber Resiliency programme & vulnerability scanning
Coverage of third-party ICT provider risks
Decision 12767/2026 (Gov. Gazette B' 2673) — TEA Risk Management
Risk Management System & Risk Manager role
Risk Management Policy & Risk Appetite Statement
Risk categories: operational, compliance, investment, actuarial
Asset-Liability Management (ALM) & liquidity plans
Risk Register & Risk Management Report
Own Risk Assessment (ORA) every three years