Pillar 3 disclosure is the public reporting that banks are required to make about their capital, their risk exposures and the way they measure and manage risk. It is the third pillar of the Basel framework, called market discipline. The idea is that if investors, depositors, counterparties and analysts have reliable and comparable information about a bank's risk profile, they will reward prudent banks and penalise weak ones through the price and availability of funding, reinforcing the work of supervisors.
It complements the Pillar 1 capital requirement, which sets minimum capital, and the Pillar 2 capital requirement, which adds supervisory review. Pillar 3 is separate from financial reporting under accounting standards and from the confidential regulatory reporting that banks send to supervisors, though it draws on the same data.
Development
Pillar 3 was introduced with Basel II in 2004. The first version set out broad disclosure topics and left banks to decide on presentation, with the result that reports differed widely in content and layout and were hard to compare. The financial crisis of 2007 to 2009 showed that markets had lacked usable information on matters such as the composition of capital, securitisation exposures and liquidity.
The Basel Committee on Banking Supervision revised the framework in three phases between 2015 and 2018. The central change was a move to prescribed templates with fixed rows and columns for quantitative data, alongside tables for qualitative information, each with a set publication frequency. Later additions have covered the final Basel III reforms and, more recently, exposures to crypto-assets and climate-related risks.
What banks disclose
A Pillar 3 report is organised by topic. The principal areas are:
- Key metrics and capital. The capital ratios, the leverage ratio, the composition of regulatory capital and the main features of each capital instrument, with a reconciliation to the balance sheet.
- Risk-weighted assets. An overview of risk-weighted assets by risk type and approach, and how they changed over the period.
- Credit risk. Exposures by asset class, geography and credit quality, non-performing and forborne exposures, the use of collateral and guarantees, and the parameters and performance of internal models.
- Counterparty, market and operational risk. Derivatives exposures, trading book measures and backtesting results, and operational risk requirements and losses.
- Liquidity. The liquidity coverage ratio and the net stable funding ratio, with their components.
- Other topics. Securitisation, interest rate risk in the banking book, asset encumbrance, remuneration of senior staff and risk-takers, and indicators of systemic importance.
Under the final reforms, banks that use internal models must also publish the risk-weighted assets they would report under standardised approaches, so that readers can see how much benefit the models provide and how the output floor applies.
Principles, frequency and assurance
The Basel standard sets five guiding principles: disclosures should be clear, comprehensive, meaningful to users, consistent over time and comparable across banks. Frequency depends on the item. Key metrics and the overview of risk-weighted assets are published quarterly, many detailed templates semi-annually, and qualitative descriptions of risk management annually. Reports are published at the same time as the financial statements, or shortly afterwards, usually as a standalone document on the bank's website.
Banks must have a formal disclosure policy approved by the board, and senior management attests that the report has been prepared under internal controls. Pillar 3 reports are not generally subject to external audit in the way that annual accounts are, although some items overlap with audited figures. A bank may omit information that is proprietary or confidential, or immaterial, provided it says that it has done so.
Implementation in the European Union and elsewhere
In the European Union the requirements are set out in the Capital Requirements Regulation, with uniform formats laid down in technical standards developed by the European Banking Authority. Large institutions disclose the most and most often, while small and non-complex institutions have reduced obligations. European rules also require large listed banks to disclose environmental, social and governance risks, including the alignment of their lending with climate objectives, and the European Banking Authority runs a central data hub, live since January 2026, through which banks' Pillar 3 information is made available in one place.
Other jurisdictions implement the standard through their own rules. In the United Kingdom the requirements sit in the rulebook of the Prudential Regulation Authority, and in the United States the banking agencies require public disclosures from larger banking organisations. Requirements for loss-absorbing capacity, including the minimum requirement for own funds and eligible liabilities, are disclosed alongside.
Limitations
Market discipline works only if the information is used and if those who use it stand to lose. Pillar 3 reports are long and technical, and in practice they are read mainly by specialist analysts and rating agencies. Expectations of state support for large banks can blunt the incentive of creditors to react. Disclosures are periodic and backward-looking, so they may say little about a fast-moving problem: the deposit runs on several banks in 2023 developed within days. Differences in national implementation and in internal models continue to limit comparability, and the preparation cost is significant for smaller banks. Supporters respond that standardised, public data on bank capital adequacy is a precondition for any informed market assessment.