Securities Financing Transactions Regulation: Reporting and Reuse

The Securities Financing Transactions Regulation, Regulation (EU) 2015/2365, requires both sides of a covered trade to file matching reports with an authorized trade repository by the working day after the trade, imposes written disclosure and consent conditions before any received collateral can be reused, and obliges investment funds to disclose their SFT activity to investors.¹ Everything else in the regulation flows from those three duties.

Which Transactions Are Covered

Four categories of trade fall inside SFTR:²

Repurchase agreements, where a security is sold and simultaneously agreed to be bought back at a set price on a future date. The economics are a short-term secured loan.
Securities or commodities lending and borrowing, where assets are temporarily transferred in exchange for collateral, often to cover a short position or settle a trade.
Buy-sell back and sell-buy back transactions, economically similar to repos but structured as two separate trades rather than one contract with two legs.
Margin lending, meaning credit extended specifically to finance the purchase, sale, or trading of securities. Ordinary commercial or consumer loans that happen to be secured by financial instruments for unrelated purposes are excluded.

Derivatives already caught by EMIR (Regulation (EU) No 648/2012) are outside SFTR, but liquidity swaps and collateral swaps that sit outside EMIR’s derivative definitions are inside.¹

Who Has to Report

SFTR splits obligated parties into financial and non-financial counterparties, and both groups must report. The financial counterparty list is broad:³

Credit institutions (banks)
Investment firms
Insurance and reinsurance undertakings
UCITS funds and their management companies
Alternative investment funds managed by authorized AIFMs
Institutions for occupational retirement provision
Central counterparties and central securities depositories
Third-country entities that would need authorization under any of the above categories if they were established in the EU

A non-financial counterparty is essentially any other undertaking established in the EU or a third country.³ Corporate treasury desks, sovereign wealth funds, and other entities outside the traditional financial sector all face SFTR reporting once they enter a covered trade.

The regulation reaches beyond the EU in one specific way: if a non-EU entity reuses collateral provided by an EU-based counterparty, the Article 15 reuse rules apply regardless of where that entity is headquartered.¹ All phases of the reporting obligation, which were rolled out across financial and non-financial counterparties between April 2020 and January 2021, are now live.

What Must Be Reported and When

Every report must reach a trade repository registered with ESMA no later than the working day after the trade is concluded, modified, or terminated. That T+1 deadline is the operational heart of the regime. Records of every reported SFT must be retained for at least five years after termination.⁴

Identifiers You Need Before You Can Report

Every reporting entity needs a Legal Entity Identifier, a 20-character alphanumeric code that uniquely identifies a legally distinct entity in a financial transaction.⁵ LEIs are issued by local operating units accredited by the Global LEI Foundation, with an initial registration fee and an annual renewal that typically runs between roughly €65 and €100. If the LEI slips into “inactive” status, reports will fail validation.

Each trade also needs a Unique Transaction Identifier agreed between the two counterparties, so the repository can pair the two sides. Mismatched UTIs are one of the most common reasons reports fail reconciliation, so front offices need to coordinate before the deadline runs out.

The Four Tables of Data

The reporting schema is organized into four tables covering counterparty data, loan and collateral terms, margin data, and collateral reuse. Table one names the parties, where they are established, and how they are classified. Table two, the largest, captures the economic terms: security type, value, interest or repo rate, haircut, maturity date, and the currency of the cash leg. Table three records the initial and variation margin posted by each side. Table four addresses collateral reuse, showing how much of the received collateral has been recycled and how much supports the reporting entity’s own funding.

Across the four tables the framework contains roughly 155 fields, and a large share must reconcile between the two counterparties. When values do not match, say a different maturity date or haircut, the repository flags the trade for correction, and firms that live in a constant state of chasing breaks tend to draw supervisory attention.

DTCC’s Global Trade Repository, operating through its Irish entity DDRIE, is one of the registered repositories serving SFTR reporting.⁶ ESMA maintains the public register of all authorized repositories.

Conditions on Reusing Collateral

Article 15 sits alongside the reporting obligation as a distinct requirement. Before a receiving counterparty can exercise any right to reuse collateral, two conditions must be met:⁷

The providing counterparty must be informed in writing of the risks and consequences involved, including the possibility of losing proprietary rights to the securities if the receiving counterparty defaults.
The providing counterparty must give prior express consent, evidenced by a signature in writing or a legally equivalent method, either within a security collateral arrangement that specifically provides for a right of use or through a title transfer collateral arrangement.

When reuse is actually exercised, two further conditions apply: it must follow the terms in the collateral arrangement, and the financial instruments must be transferred out of the providing counterparty’s account.⁷ For third-country counterparties whose accounts are subject to non-EU law, the regulation allows alternative evidence of reuse where a direct account transfer is not feasible.

These conditions apply whether the collateral arrangement was signed before or after SFTR took effect. Failing to meet the disclosure and consent requirements can render the reuse invalid and potentially unenforceable, which is a legal risk that goes well beyond the size of any regulatory fine.

Fund Disclosure Requirements

Investment funds face a third layer on top of trade reporting. UCITS management companies and UCITS investment companies must disclose their use of SFTs and total return swaps in half-yearly and annual reports, and AIFMs must include the same information in their annual reports.⁸ The content follows a standardized data set in Section A of the SFTR Annex, covering the types of transactions used, the proportion of assets involved, and the identity of counterparties.

Prospectuses and other pre-contractual documents must also disclose the fund’s intended use of securities financing transactions before investors commit capital. The point is that an investor can see, both before and after investing, how a fund uses SFTs to generate returns or manage liquidity.

Penalties for Non-Compliance

Each member state must give its national competent authority a range of sanctions. SFTR sets minimum ceilings for those maximum fines, so member states can go higher but not lower:⁹

Natural persons face maximum fines of at least €5,000,000.
Legal persons that breach the Article 4 reporting rules face maximum fines of at least €5,000,000, or up to 10% of total annual turnover based on the most recent approved accounts, whichever is higher.
Legal persons that breach the Article 15 collateral reuse rules face maximum fines of at least €15,000,000, or up to 10% of total annual turnover.
Regardless of those caps, fines can reach at least three times the profits gained or losses avoided from the violation.

Regulators can also issue public censure, withdraw or suspend authorizations, and temporarily ban individuals from management roles.⁹ The gap between the €15 million ceiling for reuse violations and the €5 million ceiling for reporting failures signals how seriously the framework treats hidden leverage built through rehypothecation chains.

A Note for Cross-Border Firms

SFTR is an EU regulation, and complying with it does not discharge separate U.S. obligations. SEC Rule 10c-1a requires any person who agrees to a covered securities loan, or their intermediary or reporting agent, to report specific loan terms to FINRA’s Securities Lending and Transparency Engine.¹⁰ After multiple delays, the compliance date is September 28, 2026.¹¹ The data fields overlap with SFTR but are not identical, and reports go to a different destination on a same-day (T+0) timetable. Firms lending securities in both markets need reporting infrastructure that can produce the right output in the right format for each jurisdiction on the day the trade happens.

1
European Union. Regulation (EU) 2015/2365 of the European Parliament and of the Council
2
European Securities and Markets Authority. SFTR Reporting
3
European Securities and Markets Authority. Article 3 Definitions
4
European Securities and Markets Authority. Article 4 Reporting Obligation and Safeguarding in Respect of SFTs
5
Office of Financial Research. Frequently Asked Questions – Section: How Does the LEI Work?
6
DTCC. GTR Europe – SFTR (ESMA)
7
European Securities and Markets Authority. Article 15 Reuse of Financial Instruments Received Under a Collateral Arrangement
8
European Securities and Markets Authority. Article 13 Transparency of Collective Investment Undertakings
9
European Securities and Markets Authority. Article 22 Administrative Sanctions and Other Administrative Measures
10
eCFR. 17 CFR 240.10c-1a – Securities Lending Transparency
11
FINRA. 6520 Participation in SLATE