Understanding ESMA’s Draft Regulatory Technical Standards for ESG Rating Agencies: Implications and Insights

The European Union’s framework for regulating ESG ratings entered a critical phase on May 2, 2025, when the European Securities and Markets Authority (ESMA) released its draft Regulatory Technical Standards (RTS) under the ESG Rating Regulation (ESGRR). This regulation, formally adopted in late 2024, aims to address long-standing market concerns about transparency, conflicts of interest, and methodological reliability in the ESG ratings sector. With the ending of the consultation period and final rules expected by October 2025, ESG rating providers face a transformative compliance journey.

Why Now? The Burning Platform for Regulation

Let’s rewind. Demand for ESG ratings exploded as investors poured trillions into sustainable funds. But behind the growth lurked serious problems. Back in 2021, ESMA itself sounded the alarm: unregulated raters were operating with opaque methodologies, producing wildly inconsistent scores for the same company, and often failing to disclose glaring conflicts of interest (like advising the same firms they rated). Investors, from pension funds to asset managers, were flying blind.

The ESGRR is the EU’s answer. It puts ESG rating providers squarely under ESMA’s supervision for the first time. Think of it as a licensing and monitoring regime where agencies must prove they have robust operations, clean governance, and radical transparency. The newly published draft RTS turn these broad principles into three concrete pillars of compliance.

Pillar 1: Guarding the Gates – Who Gets to Play in the EU?

Before an ESG rating agency can operate in the EU, it must pass ESMA’s strict entrance exam. The rules draw a clear line based on where the firm is based:

EU-Based Agencies: Must obtain direct authorisation from ESMA.

Non-EU Agencies: Have three potential paths, but only if they meet significant turnover thresholds (€381 million):

  1. Equivalence: If their home country's rules are deemed "equivalent" to the ESGRR.
  2. Endorsement: If their non-EU parents' ratings are "endorsed" by an EU-based subsidiary meeting ESMA's rules.
  3. Recognition: For occasional, case-by-case market access.

The Application Dossier: No Stone Unturned

Getting authorised isn’t a simple form fill. Agencies must submit exhaustive documentation in machine-readable formats, including sworn attestations from senior management. The requirements cover:

Corporate Structure: Detailed ownership charts, organisational diagrams, CVs and even criminal records checks for top executives.

Business Model: A complete inventory of every ESG rating product offered, plus deep dives into their methodologies, models, key assumptions, and crucially, their policies for managing conflicts of interest.

Analytical Muscle: Headcount, experience levels, and specific expertise of their rating analysts.

Non-EU Specifics: Details of their legal representative within the EU, proof of meeting the €381M turnover threshold, and information about supervision in their home country.

The Fine Print That Bites:

Methodology Scrutiny: Agencies must explicitly document how their ratings incorporate major EU frameworks like the Sustainable Finance Disclosure Regulation (SFDR) or the Paris Agreement climate targets. No vague claims allowed.

No Shell Games: For non-EU providers using the "endorsement" route, ESMA demands ironclad proof of "substantive analytical presence" within the EU. Simply setting up a mailbox ("letterbox entity") won’t cut it.


Pillar 2: Building Fort Walls – Crushing Conflicts of Interest

Imagine a firm rating a company’s sustainability while simultaneously selling it consulting services on how to improve that very score. The ESGRR says: Never again. The draft RTS enforce brutal separation rules to protect rating independence.

Absolute Bans: ESG rating activities cannot legally coexist within the same entity as:

  • Consulting Services (sustainability or otherwise)
  • Credit Rating Activities
  • Audit or Assurance Services
  • Investment Services (like portfolio management)

ESMA is crystal clear: This requires separate legal entities. But they go further – mere legal separation isn’t enough. These entities must operate from physically separate offices with secure access controls to prevent any functional overlap. No sharing coffee machines in the hallway if one side rates and the other consults!

Conditional Coexistence (With Extreme Safeguards): Some services might coexist with ESG ratings in the same corporate group (but likely still in separate entities), subject to a fortress of internal barriers:

  • Investment Services
  • Credit Services
  • Insurance Services
  • Benchmark Administration

To manage this, firms must build:

Organisational & Physical "Chinese Walls": Separate teams, completely independent reporting lines, and dedicated workspaces (physical or strict virtual segregation).

Digital Moats: Robust IT security systems actively preventing data leakage between business units.

Governance Guardians: Annual senior management assessments specifically reviewing the effectiveness of these conflict walls.

Pay Check Independence: Benchmark administrators’ pay must be insulated from ESG rating performance.


ESMA’s Stern Warning: This isn’t about writing a policy document. The separation must be substantive and demonstrable in daily operations. "Superficial arrangements" or "mere legal formalities" will be rejected. Employees must routinely certify they aren’t working on prohibited services.

Extra Shackles for Benchmark Providers: If a firm also runs benchmarks, the rules get even tighter. Their ESG ratings cannot simply rely on ("mechanically" following) their benchmark outputs. Any potential conflicts arising from this dual role must be laid out explicitly to clients before a contract is signed.


Pillar 3: Forcing Open the Black Box – Radical Transparency

Historically, understanding how an ESG score was calculated was like deciphering ancient runes. The Disclosure RTS aim to shatter that opacity. Providers will have to publish incredibly granular details about their ratings, both publicly and directly to rated entities.

What Gets Dragged Into the Light?

For each and every ESG rating product, agencies must publicly disclose, in a standardised, easily findable format on their website:

Full Methodology Blueprints: Every step of the rating process, the models used, and the key assumptions baked in.

Data Warts and All: Clear explanations of any data gaps (e.g., missing Scope 3 emissions data), the proxies used to fill them (e.g., industry averages), and assumptions about future performance (forward-looking).

Governance under the Microscope: Detailed conflict-of-interest policies (including whistleblower channels and client onboarding checks) and procedures for how ratings are reviewed and updated over time.

AI’s Limitations: If artificial intelligence tools are used in data processing or scoring, their limitations must be explicitly stated – a direct response to rising regulatory concern over "black box" algorithms.

ESMA’s Proposed Disclosure Map:

To make this flood of information navigable, ESMA suggests grouping disclosures into six clear themes:

Rating Product Disclosures: What the rating covers, how it aligns with international agreements (like the Paris Agreement), and how it determines what environmental or social risks truly matter ("materiality").

General Methodological Disclosures: The time horizons used, the ranking/scoring system, limitations related to AI usage, and the relevance of scientific evidence underpinning the methodology.

Data & Methodology Limitations: Specifics on data gaps, the use of proxies or assumptions, and the level of engagement the rater has with the companies it scores.

Organisational Disclosures: Who owns the agency, how conflicts are mitigated, and how fees are structured (emphasising fairness and non-discrimination).

Specific Methodological Disclosures: How non-public data is collected and handled, and how forward-looking projections (like climate transition plans) are treated in the rating.

Methodology Revisions: How the agency gathers stakeholder feedback and how often it updates its methodologies.

The Ongoing Burden: This isn’t a one-time dump. Disclosures must be updated with every new methodology or rating product launch. Transparency is now a continuous, product-specific obligation.


The Agency Impact: Restructuring, Costs, and Opportunity

Let’s be blunt: Compliance will be a monster undertaking for ESG rating firms.

Business Model Surgery: Agencies currently offering conflicting services face major restructuring. Creating separate legal entities or physically splitting offices is highly probable.

Compliance Army Needed: Firms will need dedicated teams (legal, compliance, ops) to prepare the massive authorisation dossiers – think hundreds of pages detailing every policy, procedure, and manual ESMA demands.

The Perpetual Paper Trail: Once authorised, the work doesn’t stop. Agencies must constantly update ESMA on material changes (new partners, major methodology overhauls) and be ready for on-site inspections akin to those faced by credit rating agencies.

Methodology in the Spotlight: The era of opaque, proprietary models is over. Every scoring step must be codified and published. This creates a significant operational hurdle: new ratings cannot be launched until their entire methodology is documented and published in the ESMA-mandated format. This will inevitably slow product development cycles.

The IP Dilemma: Many firms are sweating bullets over disclosing what they consider crown jewels – proprietary data models and analytical techniques. ESMA acknowledges this tension in its consultation, noting firms must "balance" transparency with protecting legitimate trade secrets, and that thresholds for disclosing data limitations need careful calibration. Agencies will be leaning heavily on lawyers to navigate this minefield.

The Small Firm Squeeze: The compliance cost is staggering, easily exceeding €500,000 for initial setup. This is a death knell for many smaller, specialised agencies. Analysts predict a wave of consolidation, potentially leaving 80% of the EU market controlled by just 3-5 giants. This isn't just about competition; it risks homogenising methodologies and losing valuable sector-specific expertise as smaller players vanish or cut product lines to manage the reporting burden.


Is There an Upside? Absolutely.

Credibility = Demand: Uniform, enforced standards should significantly boost investor trust in ESG ratings. The EU Council itself links these reforms directly to "higher investor trust."

Level Playing Field: Everyone plays by the same rulebook, raising the overall quality bar.

Market Growth: Clearer, more comparable ratings make it easier for investors to use them, expanding the market. The EU anticipates the rules will "encourage investments" in sustainability.

Mainstream Integration: By aligning the ESG rating framework with other key EU rules (like those for credit ratings, benchmarks, SFDR, the Taxonomy, and CSRD), the industry becomes a more credible pillar of the mainstream capital markets. Agencies that adapt quickly could win significant new business from previously sceptical investors.


The Investor & Market Ripple Effect: Clarity, Comparability, Capital

For asset managers, pension funds, and banks, these rules promise much-needed relief.

Trust, Audited: Knowing providers operate under strict independence and transparency rules should make ESG scores feel less like guesswork and more like reliable inputs.

Apples-to-Apples, Finally: With every provider forced to publish methodologies and assumptions in a standardised way, investors can finally dissect why Company X got an 'A' from Vendor A but a 'B' from Vendor B. This directly tackles the notorious problem of "rating divergence."

Benchmarking Made Easier: Standardised disclosure formats and common definitions (where possible) will allow investors to compare different providers' ratings side-by-side with unprecedented ease.

Portfolio Integration Boost: This improved comparability should accelerate the integration of ESG factors into core investment processes: portfolio construction, risk management, and regulatory reporting (like SFDR). Pension funds could confidently use scores from multiple providers, knowing each is based on disclosed and auditable processes.

A Cohesive Sustainable Finance System: The explicit linkage of ESG ratings to the broader EU sustainable finance framework (SFDR, Taxonomy, CSRD) aims to create a unified ecosystem for sustainability data. This should channel more capital towards genuinely sustainable activities by giving investors clearer signals.

Shedding the "Wild West" Image: Regulating ESG ratings similarly to credit ratings and benchmarks lends the whole sector greater legitimacy and stability. Financial institutions can trust that any ESMA-authorised provider meets baseline quality criteria.


The Critical View: Gaps, Risks, and the Innovation Dilemma

While ESMA's draft RTS are a landmark step, experts highlight significant unresolved issues and potential unintended consequences:

The Consolidation Conundrum: The compliance burden overwhelmingly favours large, resource-rich incumbents. The likely demise of smaller, specialised agencies means less methodological diversity and a potential "dumbing down" of ESG ratings to the lowest common denominator.

Innovation Chill: Mandating the public disclosure of sensitive methodologies and fee structures risks eroding competitive advantages and discouraging investment in R&D for better rating techniques. Why innovate if your breakthrough must be handed to competitors (Nature-Risk Ratings, for example)?

Physical Separation in a Digital Age: Requiring physical office segregation for ESG functions feels increasingly anachronistic in an era of cloud computing and remote work. It's costly and ignores the reality of how modern knowledge workers operate. Rules haven't caught up with technology.

Transition Turbulence: The RTS offer no practical guidance for complex, integrated giants on how to transition their business models. How do you surgically separate deeply intertwined operations?

Definitional Black Holes: Key prohibitions lack clear boundaries. What exactly constitutes forbidden "mechanical reliance" by benchmark providers on their own ESG ratings? Without clear thresholds, enforcement becomes subjective.

The Materiality Elephant in the Room: While the RTS require disclosing whether a rater uses single materiality (financial risk to the company) or double materiality (including the company's impact on society/environment), they do nothing to harmonise this fundamental divide. This remains a core reason ESG ratings are often inherently incomparable.

Transparent Flaws Aren't Fixed: Providers can comply while using questionable methodologies, if flaws are disclosed. This allows ratings to remain "transparently flawed," especially without science-based thresholds. Agencies can claim "alignment" with climate goals while using self-defined, lenient criteria.

Systemic Risks Ignored: The RTS don't address broader market stability concerns, like the potential for correlated ESG downgrades during a climate crisis to trigger fire sales and liquidity shocks.

The Bottom Line:

"Will these rules turn ESG ratings into reliable tools for financing sustainability? Or just breed box-ticking compliance? ESMA must choose: handcuffs that stifle innovation—or guardrails that channel market energy toward real impact."


Sources 

European Securities and Markets Authority (ESMA). (2025). Consultation Paper on Technical Standards under ESG Rating Regulation (ESMA84-2037069784-2276). https://www.esma.europa.eu
Council of the European Union. (2024, November 27). *Regulation (EU) 2024/3005 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities*. Official Journal of the European Union. https://eur-lex.europa.eu
International Institute for Management Development (IMD). (2025). How regulation is shaping ESG ratings: Global market analysis. IMD Business School.
WINSSolutions. (2025). ESG risk management in 2025: Data gaps and compliance challengeshttps://wins-solutions.com/reports
Freshfields Bruckhaus Deringer. (2025, May 15). ESMA consults on draft RTS for ESG rating providershttps://www.freshfields.com/insights
European Parliament. (2019). *Regulation (EU) 2019/2088 on sustainability‐related disclosures in the financial services sector*. Official Journal of the European Union.
S&P Global. (2025). *ESG ratings convergence study: Correlation analysis 2020-2024*. https://www.spglobal.com/esg
European Commission. (2021). Strategy for financing the transition to a sustainable economy (COM(2021) 390 final). https://ec.europa.eu
International Organization of Securities Commissions (IOSCO). (2021). Environmental, Social and Governance (ESG) Ratings and Data Products Providers: Final Report (FR09/21). https://www.iosco.org