Digital Policy Alert logo

Progress

Current status
in force
17 Jan 2025in force
16 Jan 2023in grace period
28 Nov 2022adopted
10 Nov 2022under deliberation
10 May 2022under deliberation
07 Dec 2021under deliberation
24 Nov 2021under deliberation
24 Sep 2020under deliberation

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
DLT development
infrastructure provider: cloud computing, storage and databases
Government Branch
legislature
executive
Government Body
parliament
central government
Implementation Level
supranational

Timeline of events

17 Jan 2025
in force

Implemented Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 17 January 2025, the Regulation on digital operational resilience for the financial sector (DORA), including cybersecurity measures is implemented. The Regulation lays down uniform obligations regarding security, risk management, monitoring and i…

  • Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector, Official Journal of the European Union (Official)
Event typelaw
Action typeimplementation
Government branchlegislature
Government bodyparliament
16 Jan 2023
in grace period

Entry into force with grace period of Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 16 January 2023, the Regulation on digital operational resilience for the financial sector (DORA) enters into force with grace, twenty days after being published in the Official Journal of the European Union. The Regulation lays down uniform obli…

  • Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector, Official Journal of the European Union (Official)
Event typelaw
Action typein force with grace period
Government branchlegislature
Government bodyparliament
28 Nov 2022
adopted

Adopted Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures by Council of the European Union

On 28 November 2022, the Council of the European Union adopted the Digital Operational Resilience Act (DORA Regulation). The Regulation lays down uniform obligations regarding security, risk management, monitoring and information sharing of informat…

  • Digital finance: Council adopts Digital Operational Resilience Act, Council of the EU (Official)
Event typelaw
Action typeadoption
Government branchlegislature
Government bodyparliament
10 Nov 2022
under deliberation

Passed Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity by European Parliament

On 10 November 2022, the European Parliament passed the Digital Operational Resilience Act (DORA Regulation). The Regulation lays down uniform obligations regarding security, risk management, monitoring and information sharing of information and com…

  • Digital finance: Digital Operational Resilience Act (DORA), European Parliament (Official)
Event typelaw
Action typepassage
Government branchlegislature
Government bodyparliament
10 May 2022
under deliberation

Reached provisional agreement between European Parliament and Council on Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 10 May 2022, the European Parliament and the Council of the European Union announced that a provisional agreement on the Regulation on digital operational resilience for the financial sector (DORA) Proposal was reached. The Proposal outlines cybe…

  • Trilogue Agreement on DORA, EU Council (Official)
Event typelaw
Action typepassage
Government branchexecutive
Government bodycentral government
07 Dec 2021
under deliberation

Issued European Parliament approach on Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 7 December 2021, the European Parliament adopted its general approach on the Regulation on digital operational resilience for the financial sector (DORA). The Proposal outlines cybersecurity requirements to ensure the financial sector's digital o…

  • REPORT on the proposal for a regulation of the European Parliament and of the Council on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014 and (EU) No 909/2014, EU Parliament (Official)
Event typelaw
Action typepassage
Government branchexecutive
Government bodycentral government
24 Nov 2021
under deliberation

Announced Council of EU general approach on Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 24 November 2021, the Council of the European Union adopted its general approach on the Proposal on Regulation on digital operational resilience for the financial sector (DORA). The Proposal outlines cybersecurity requirements to ensure the finan…

  • Digital finance package: Council reaches agreement on MiCA and DORA, Council of the European Union (Official)
Event typelaw
Action typepassage
Government branchexecutive
Government bodycentral government
24 Sep 2020
under deliberation

Introduced Proposal for a Regulation on digital operational resilience for the financial sector (DORA) including cybersecurity measures

On 24 September 2020, the European Commission submitted the Proposal for a Regulation on digital operational resilience for the financial sector (DORA) to the European Parliament and the Council of the European Union. The Regulation outlines securit…

  • Proposal for a Regulation on digital operational resilience, European Commission (Official)
Event typelaw
Action typeintroduction
Government branchexecutive
Government bodycentral government