Solvency II — Directive 2009/138/EC on the taking-up and pu

Does our insurer hold enough capital to survive a 1-in-200-year loss — and what happens to our licence if it does not?

Every EU insurer and reinsurer must continuously cover its Solvency Capital Requirement (99.5 % VaR) or face a recovery plan within six months and, if the Minimum Capital Requirement is breached, licence withdrawal — enforced by national supervisors since 1 January 2016 [Art. 138, Art. 139].

Short Answer

Solvency II replaced 13 legacy insurance directives with a single risk-based framework built on three pillars: quantitative capital requirements (Pillar 1), governance and risk management (Pillar 2), and supervisory reporting and public disclosure (Pillar 3) [Art. 100–135, Art. 41–49, Art. 35, Art. 51–56]. The Solvency Capital Requirement (SCR) is calibrated to a 99.5 % Value-at-Risk over one year, meaning the undertaking must be able to absorb a loss expected only once in 200 years [Art. 101(3)]. Below the SCR, the supervisor imposes a realistic recovery plan; below the Minimum Capital Requirement (MCR), the ultimate sanction is withdrawal of authorisation [Art. 138, Art. 139]. EIOPA publishes risk-free interest rate curves quarterly that all undertakings must use for technical provisions [Art. 77e].

Who is affected

All insurance and reinsurance undertakings authorised in the EU/EEA, including captives, as well as insurance groups under group supervision [Art. 2, Art. 212]. Small undertakings below defined thresholds (gross written premium income below EUR 5 million and technical provisions below EUR 25 million) may be exempted by the Member State [Art. 4]. Intermediaries and pure brokers are not in scope.

Deadline

Solvency II applies continuously since 1 January 2016. The next operational deadline is the annual Solvency and Financial Condition Report (SFCR) filing — due within 14 weeks after the financial year-end for solo and 20 weeks for group reporting [Art. 51, Art. 256]. Quarterly Quantitative Reporting Templates (QRTs) are due within 5 weeks after each quarter-end [Art. 35]. The 2024 review (Directive (EU) 2025/2) introduces phased changes from 2027 onwards.

Risk

Breach of the SCR triggers a mandatory recovery plan and potential restriction of business operations [Art. 138]. Breach of the MCR can result in withdrawal of the authorisation to carry on business [Art. 139, Art. 144]. Sanctions for non-compliance are set at national level by each Member State [Art. 34]; in practice, national supervisors can impose fines, public censure, or restrict the free disposal of assets. Reputational damage from an SFCR revealing capital shortfalls can trigger policyholder flight and rating downgrades.

Proof

Legal status

• In force
• as of 2026-04-17
• Consolidated version incorporating amendments up to Directive (EU) 2025/2

Primary sources

• EUR-Lex — Full text of the legal act
• EIOPA — Solvency II — European insurance authority guidance

What to do now

Legal / DPO

•Verify that your undertaking's authorisation covers all classes of insurance actually written and that any cross-border passporting notifications are current [Art. 14, Art. 15, Art. 145–149].
•Review outsourcing agreements for critical or important functions — each must preserve supervisory access rights and ensure the outsourced provider is subject to fit-and-proper requirements [Art. 49, Art. 38].
•Confirm that the annual Solvency and Financial Condition Report (SFCR) is published within the statutory deadline and that its content meets the minimum disclosure requirements, including capital structure and risk profile [Art. 51–56].

Compliance

•Ensure the Own Risk and Solvency Assessment (ORSA) is performed at least annually and whenever the risk profile changes materially, and that results are reported to the board and the supervisor [Art. 45].
•Maintain a written policy framework covering risk management, internal control, internal audit, and the actuarial function — each must be reviewed at least annually [Art. 41–48].
•Validate that all four key functions (risk management, compliance, internal audit, actuarial) are staffed with fit-and-proper persons and operate with adequate independence [Art. 42, Art. 44–48].

IT / Security

•Implement data governance and IT controls that support accurate, complete, and timely production of Quantitative Reporting Templates (QRTs) and the Regular Supervisory Report (RSR) [Art. 35, Art. 51].
•Ensure the internal model — if used instead of the standard formula — has robust IT infrastructure for daily risk calculations, model change governance, and validation processes [Art. 112–126].
•Maintain business continuity and disaster recovery plans that cover all critical insurance operations, including claims processing and policyholder data, as part of the system of governance [Art. 41, Art. 44].

Product / Engineering

•Build product pricing and reserving processes that align with the Solvency II best-estimate and risk-margin methodology for technical provisions [Art. 76–86].
•Assess how each new product affects the SCR standard formula risk modules (underwriting risk, market risk, counterparty default risk, operational risk) before launch [Art. 101, Art. 104–109].
•Review investment strategies backing insurance liabilities against the prudent person principle — assets must be invested in the best interest of policyholders with proper diversification [Art. 132–135].

Key Terms

Solvency Capital Requirement (SCR): The amount of eligible own funds an insurer must hold to absorb losses at a 99.5 % confidence level over one year, calculated via the standard formula or an approved internal model [Art. 100–101].
Minimum Capital Requirement (MCR): The absolute minimum level of own funds below which supervisory intervention escalates to potential withdrawal of authorisation; set as a corridor between 25 % and 45 % of the SCR [Art. 129].
Own Risk and Solvency Assessment (ORSA): A forward-looking internal assessment of overall solvency needs considering the undertaking's specific risk profile, approved risk tolerance, and business strategy [Art. 45].
Technical provisions: The best estimate of all future cash flows arising from insurance obligations plus a risk margin, calculated using EIOPA's prescribed risk-free interest rate curves [Art. 76–86].
Prudent person principle: The investment governance standard requiring insurers to invest assets in the best interest of policyholders with proper identification, measurement, monitoring, management, and diversification of risks [Art. 132].
Solvency and Financial Condition Report (SFCR): The annual public disclosure report covering business performance, governance, risk profile, valuation, and capital management, published by every authorised insurer [Art. 51–56].
Key functions: The four mandatory governance functions — risk management, compliance, internal audit, and actuarial — each staffed by fit-and-proper individuals with adequate organisational independence [Art. 44–48].

Frequently Asked Questions

What is the difference between the SCR and the MCR?

The Solvency Capital Requirement (SCR) is calibrated to a 99.5 % VaR over one year and represents the target capital level. The Minimum Capital Requirement (MCR) is a lower floor — typically between 25 % and 45 % of the SCR — below which the undertaking's authorisation may be withdrawn [Art. 100, Art. 129].

Can an undertaking use an internal model instead of the standard formula?

Yes, but only with prior supervisory approval. The internal model must meet statistical quality, calibration, validation, and documentation standards set out in Articles 112–126. Partial internal models — covering specific risk modules — are also permitted [Art. 112].

What is the ORSA and how often must it be performed?

The Own Risk and Solvency Assessment (ORSA) is a forward-looking self-assessment of overall solvency needs relative to the specific risk profile. It must be carried out at least annually and ad hoc whenever the risk profile changes materially [Art. 45].

Who must publish the Solvency and Financial Condition Report (SFCR)?

Every authorised insurance and reinsurance undertaking must publish the SFCR annually. The report must cover business performance, system of governance, risk profile, valuation for solvency purposes, and capital management [Art. 51–56].

Does Solvency II apply to small insurance undertakings?

Member States may exempt undertakings whose gross written premium income does not exceed EUR 5 million and whose gross technical provisions do not exceed EUR 25 million, provided certain other thresholds are also met [Art. 4]. Exempted firms remain subject to national regulation.

How does group supervision work under Solvency II?

Insurance groups are subject to additional supervision at group level, including a group SCR, group ORSA, and group SFCR. EIOPA may establish supervisory colleges for cross-border groups. The group supervisor is typically the authority of the Member State where the parent is located [Art. 212–260].

What happens if the SCR is breached?

The undertaking must notify the supervisor immediately, submit a realistic recovery plan within two months, and restore compliant own funds within six months — extendable to nine months in exceptional circumstances [Art. 138].

Assessment Factors & Checklist

Premium

Start 7-day free trial

Questions for Your Lawyer

Premium

Start 7-day free trial

Conclusion & Summary

Premium

Start 7-day free trial

Detailed analysis with source links.

Schalten Sie die KI-Analyse frei — mit markierten Fundstellen und direkten Links zu EUR-Lex. 7 Tage kostenlos testen.

Start 7-day free trial →

Keine Kreditkarte heute. Kündigung jederzeit.