Under the EU Credit Rating Agency Regulation (1060/2009), public credit ratings are covered by the Regulation and may be used for regulatory purposes, while private credit ratings – produced on order and shared confidentially with a limited number of persons – fall outside its scope.
Yet, in practice, most rating agencies still apply the same methodological standards, governance checks, and analytical rigour to private ratings – with one key exception: they are not publicly disclosed.
