The European Banking Authority (EBA) has issued new Draft Guidelines on the Sound Management of Third-Party Risk, aiming to replace and expand the 2019 outsourcing framework. These updated guidelines reflect a broader scope, now covering all third-party arrangements, including intragroup and non-ICT providers, across various financial entities such as banks, investment firms, fintechs, and ART issuers. Greek financial institutions are urged to re-evaluate their third-party relationships, update risk registers, and prepare for new governance and reporting obligations. This development marks a critical step toward harmonised oversight and risk mitigation across the EU financial sector.