The European Securities and Markets Authority (ESMA) has set its 2027 supervisory agenda. The announcement comes from the Paris-based regulator that coordinates securities supervision across the European Union. For compliance teams at regulated firms, the agenda signals where supervisory attention and data requests will concentrate once the year arrives.

ESMA publishes forward-looking supervisory work programmes as part of its mandate under the EU financial framework. The 2027 agenda continues that practice. It arrives as the regulator's role expands, following the 2023-2024 reforms that gave ESMA direct supervisory powers over critical market infrastructure players such as credit rating agencies, trade repositories, and, more recently, data service providers under the EU's consolidated tape regime.

What does the agenda cover?

The agenda sets out the regulator's supervisory priorities for 2027. As with prior ESMA work programmes, it identifies the areas where the authority intends to focus its direct supervision, thematic reviews, and coordinated action with national competent authorities across the 27 member states.

Practitioners reading the agenda will look for the usual markers:

• themes selected for priority supervisory attention;
• sectors where ESMA will use its direct supervisory powers;
• areas where it will coordinate convergence work among national regulators;
• planned reviews of supervisory practices themselves.

Each of these signals future work for legal and compliance departments. Firms caught by a thematic priority should expect earlier engagement, more detailed information requests, and less tolerance for slow remediation.

Who does this affect?

ESMA's agenda matters first to the entities it supervises directly. That population has grown. Supervision of benchmarks administrators transferred to ESMA from 2022. The Listing Act and related reforms added responsibilities around data publishing bodies. The 2027 agenda lands in a supervisory perimeter materially wider than it was five years ago.

The agenda also matters indirectly to every firm regulated at national level. ESMA sets common supervisory culture and priorities, and national competent authorities routinely align their own programmes with them. A priority named by ESMA in 2027 planning tends to appear in supervisory questionnaires from regulators in Frankfurt, Dublin, Milan, and Paris within the same cycle.

How should practitioners respond?

The practical response is straightforward. Read the agenda against your firm's risk register. Map each named priority to an internal owner. Check whether existing policies, monitoring, and reporting lines would satisfy a supervisory review on that topic today.

Firms that supervise directly should treat the agenda as a planning document. It frames what ESMA will ask about in annual supervisory dialogues, convergence exercises, and data-driven reviews. Those conversations go better when the firm can evidence work already underway.

For firms outside direct supervision, the agenda offers early warning. National regulators will translate it into local priorities. Compliance budgets for 2026-2027 should reflect that translation before it appears in a formal questionnaire.

The agenda also feeds into ESMA's broader planning architecture. Its multi-annual strategy and annual work programmes sit alongside the supervisory agenda, so the three documents should be read together. Where they overlap, supervisory attention is most likely.

What is the takeaway?

ESMA's 2027 supervisory agenda tells regulated firms where European supervisory pressure will land, and firms that align their compliance plans to it now will face fewer surprises later.