The Solvency II Directive (2009/138/EC): structure, pillars and where each reporting duty comes from

Directive 2009/138/EC is the text every Solvency II duty traces back to. If you file QRTs, sign off an SFCR, run the standard formula or write the ORSA report, the requirement started as an article in this directive, was detailed in a Commission regulation and was turned into a template or a guideline by EIOPA. This article explains that structure, gives the article ranges behind each of the three pillars, and ends with a table that maps each reporting and calculation duty to the article, the level 2 chapter and the template family it produces. It also names which of our Solvency II reporting and calculation tools serves each duty.

The Directive itself is long, with more than 300 articles and seven annexes. Most of it concerns authorisation, cross-border business, winding-up and the supervisors. The part a reporting or actuarial team works with is narrower, and this guide stays on that part.

What Directive 2009/138/EC is

The Solvency II Directive was adopted by the European Parliament and the Council on 25 November 2009 and published in the Official Journal on 17 December 2009. It is a recast: it replaced the earlier life, non-life and reinsurance directives with one text and added a risk-based capital regime in place of the fixed solvency margins of Solvency I. After two postponements the framework applied from 1 January 2016.

The Directive is organised in six titles. Title I holds the rules for taking up and pursuing business, and this is where the three pillars live. Title II covers contract law and policyholder information, Title III group supervision, Title IV reorganisation and winding-up, Titles V and VI other, transitional and final provisions. The full text is in our regulation library as Directive 2009/138/EC in the consolidated version, alongside the other acts under main EU regulations.

The Lamfalussy structure: three levels of text

Solvency II follows the Lamfalussy process, so the rules sit at three levels and each level adds detail to the one above.

Level 1 is the Directive. It sets the principles and the powers, and Member States transpose it into national law. Level 2 is Delegated Regulation (EU) 2015/35, adopted by the Commission on 10 October 2014 under the empowerments in the Directive. It runs to 381 articles and holds the detail: the valuation rules, the technical provisions methods, the standard formula parameters, the contents of the SFCR and the regular supervisory report. As a regulation it applies directly and needs no transposition. The implementing technical standards also sit at level 2. They are drafted by EIOPA and adopted by the Commission as implementing regulations. The two that a reporting team meets most often are Implementing Regulation (EU) 2023/894 on the templates submitted to supervisors and Implementing Regulation (EU) 2023/895 on the templates disclosed in the SFCR. Both apply to reference dates from 31 December 2023 and are the legal home of every S.xx.xx code.

Level 3 is EIOPA’s guidelines, issued under Article 16 of the EIOPA Regulation. Supervisors and undertakings comply with them or explain why not. The Guidelines on reporting and public disclosure and the Guidelines on the system of governance are the ones a reporting team reads most. EIOPA also publishes the XBRL taxonomy and the validation rules that the filing has to pass, described in our article on XBRL in insurance reporting.

Scope: who Solvency II applies to

Article 2 applies the Directive to direct life and non-life insurance undertakings and reinsurance undertakings established in a Member State, and Title III extends it to the groups they form. Article 4 excludes an insurer that meets all of a list of size conditions: annual gross written premium not above EUR 5.4 million, gross technical provisions not above EUR 26.6 million (also at group level), no liability, credit or suretyship business beyond ancillary risks, and reinsurance activity below EUR 0.6 million of premium or EUR 2.7 million of provisions and below 10 percent of either. The amounts were last adjusted for inflation in 2021. If any threshold is exceeded for three consecutive years the Directive applies from the fourth year, and an undertaking that expects to exceed them within five years is in scope from the start. Excluded firms may still apply for authorisation under the Directive.

Directive (EU) 2025/2 raises the premium and provisions amounts to EUR 15 million and EUR 50 million from 30 January 2027; our article on Directive (EU) 2025/2 and the 2027 changes covers that review. Occupational pension funds are outside the scope and report under IORP II, explained in IORP II reporting explained. UK insurers left the EU framework in 2021 and now follow the PRA’s version, compared in Solvency UK versus Solvency II.

Pillar 1: valuation and capital, Articles 75 to 135

Chapter VI of Title I holds the quantitative rules. Article 75 sets the valuation principle: assets at the amount for which they could be exchanged between knowledgeable willing parties, liabilities at the amount for which they could be transferred or settled, with no adjustment for the undertaking’s own credit standing. Articles 76 to 86 govern technical provisions: Article 77 defines them as the best estimate plus a risk margin, Articles 77a to 77e add the long-term guarantee measures introduced by Omnibus II, Article 82 sets data quality requirements and Article 86 empowers the Commission to adopt the detailed methods.

Articles 87 to 99 deal with own funds: determination in Articles 87 to 92, classification into three tiers in Articles 93 to 97, and eligibility limits in Articles 98 and 99. Article 99(b) is where ring-fenced funds enter the Directive, as the adjustment for own-fund items that can only absorb losses within a segment of the business.

Articles 100 to 127 cover the Solvency Capital Requirement. Article 101 fixes the calibration: a value-at-risk of basic own funds at a confidence level of 99.5 percent over one year. Articles 103 to 111 describe the standard formula, its basic SCR modules, the operational risk charge and the adjustment for loss absorbency, with Article 111(1)(h) covering the reduced diversification of ring-fenced funds. Articles 112 to 127 set the conditions for full and partial internal models. Articles 128 to 131 govern the Minimum Capital Requirement, a linear function of technical provisions, premiums and capital at risk, calibrated to an 85 percent one-year value-at-risk, kept within 25 and 45 percent of the SCR, above an absolute floor and calculated at least quarterly. Articles 132 to 135 close the pillar with the prudent person principle for investments.

Pillar 2: governance, ORSA and supervision, Articles 40 to 50

Chapter IV, Sections 1 and 2, hold the governance rules. Article 40 makes the administrative, management or supervisory body responsible for compliance. Article 41 requires an effective system of governance, proportionate to the nature, scale and complexity of the business. Article 42 sets the fit and proper requirements, Article 44 the risk management system, Article 46 internal control, Article 47 the internal audit function, Article 48 the actuarial function and Article 49 the rules on outsourcing.

Article 45 is the own risk and solvency assessment. The undertaking assesses its overall solvency needs, its continuous compliance with the capital requirements and the technical provisions, and how far its risk profile deviates from the standard formula assumptions. Article 45(6) requires the results of each assessment to be reported to the supervisor as part of the information under Article 35, which is how the ORSA becomes a reporting duty. Article 50 empowers the Commission to adopt the level 2 detail, which sits in Chapter IX of the Delegated Regulation, Articles 258 to 275.

The supervisory side of pillar 2 is in Chapter III: Article 36 sets the supervisory review process, Article 37 the capital add-on and Articles 38 and 39 the supervision of outsourcing and portfolio transfers.

Pillar 3: reporting and disclosure, Articles 35 and 51 to 56

Article 35 is the legal basis for everything an insurer sends to its supervisor. Paragraph 1 requires undertakings to submit the information necessary for supervision; paragraph 2 gives supervisors the power to define its nature, scope and format, at predefined periods, on predefined events and during enquiries; paragraph 4 requires it to be complete, comparable, consistent over time, relevant, reliable and comprehensible; paragraph 5 requires a written reporting policy approved by the board. The quarterly and annual QRTs, the regular supervisory report and the ORSA supervisory report all flow from this one article. The template formats come from the implementing technical standards adopted under it.

Articles 51 to 56 in Chapter IV, Section 3, govern public disclosure. Article 51 requires an annual solvency and financial condition report and lists its contents: business and performance, system of governance, risk profile, valuation for solvency purposes and capital management, including the SCR and MCR amounts and any capital add-on or non-compliance. Article 53 allows supervisors to permit non-disclosure of information that would give competitors an advantage or breach confidentiality. Article 54 requires updates after a major development, Article 55 a disclosure policy and board approval, and Article 56 empowers the level 2 and level 3 detail. Article 256 repeats the duty at group level.

Where each reporting duty comes from

The table maps the duties a reporting team owns to the article they come from, the chapter of Delegated Regulation (EU) 2015/35 that details them, and the template family or document they produce. Template codes are those of Implementing Regulation (EU) 2023/894; the report-ex pages behind the links show each template line by line.

Two things the table shows. First, every template has an article behind it, and the article is usually short: Article 35 is two pages, the templates it produces run to hundreds. Second, the ring-fenced funds row is the only one that reaches into pillar 1 and pillar 3 at once, which is why the fund-level SR templates cause more validation trouble than their size suggests. Our articles on the Solvency II QRT list and on ring-fenced funds under Solvency II go into both.

Amendment history

The Directive has been amended thirteen times since 2009. Most changes are consequential, but four matter to the framework.

Directive 2014/51/EU, known as Omnibus II, was adopted on 16 April 2014. It aligned the Directive with the EIOPA Regulation, inserted the long-term guarantee measures in Articles 77a to 77e, the transitional measures in Articles 308a to 308e and the phasing-in of reporting and disclosure deadlines, and fixed the application date at 1 January 2016 after Directive 2013/58/EU had postponed it.

The 2019 review changed the level 2 text rather than the Directive. Delegated Regulation (EU) 2019/981 of 8 March 2019 revised the standard formula: simplifications, the look-through approach, undertaking-specific parameters, the loss-absorbing capacity of deferred taxes and the treatment of unrated debt. In the same year Directive (EU) 2019/2177, the ESAs review, amended the Directive on cross-border cooperation and the information EIOPA receives on internal models.

The 2021 changes were two. Delegated Regulation (EU) 2021/1256 added sustainability risks to the governance and prudent person rules, and the Commission’s notice of 19 October 2021 adjusted the Article 4 and Article 129 amounts for inflation, which is why the current thresholds are EUR 5.4 million and EUR 26.6 million rather than the round figures of 2009. In September 2021 the Commission also tabled the proposal that became the Solvency II review.

Directive (EU) 2025/2 is that review. It was adopted on 27 November 2024, published on 8 January 2025 and applies from 30 January 2027. It rewrites proportionality, reporting deadlines, the SFCR, the risk margin, the extrapolation of the risk-free curve and group supervision. The article-by-article change table is in Directive (EU) 2025/2 explained, and its companion Directive (EU) 2025/1 on recovery and resolution is covered in the IRRD explained.

What the pillars mean for a reporting team

Pillar 1 means the numbers in the templates are calculated, not booked. Technical provisions, own funds, the SCR and the MCR are outputs of methods fixed in the Delegated Regulation, and the supervisor can ask for the calculation behind any cell. The team needs a calculation trail from data to template that survives an audit, and a way to rerun the standard formula when EIOPA publishes a new risk-free curve or symmetric adjustment.

Pillar 2 means the process is a deliverable. The reporting policy under Article 35(5), the disclosure policy under Article 55, the actuarial function’s opinion on the technical provisions and the ORSA report are documents the supervisor reads, and the review process under Article 36 tests whether the governance works in practice. Four-eyes review, sign-off records and a documented data flow are the reporting team’s contribution to the system of governance.

Pillar 3 means deadlines and formats. Quarterly templates are due five weeks after quarter end, annual templates fourteen weeks after year end, the SFCR at the same time, and every file has to pass EIOPA’s validation rules and the national ones before the supervisor accepts it. The 2027 review moves the annual deadline to sixteen weeks and adds an audit of the balance sheet in the SFCR. The calendar, the taxonomy version and the validation set are the three things that change most often, and a team that tracks them in one place files on time.

Where this lands in the software

The product set follows the pillars. On the calculation side, TP Tool produces the technical provisions under Articles 76 to 86, SCR Tool runs the standard formula under Articles 100 to 111 and the MCR under Articles 128 to 131 with every formula visible, and RFF Tool calculates the notional SCRs for ring-fenced funds under Articles 216 and 217 of the Delegated Regulation. On the reporting side, QRT Tool maps the results to the templates of Implementing Regulation (EU) 2023/894, validates them against EIOPA’s rules and files solo and group sets from one login, and BOE Tool does the same for the PRA’s Solvency UK templates. The regulation library holds the Directive, the Delegated Regulation and the EIOPA guidelines in 26 languages, so the article behind any cell is one click away.