European Union: Implemented Regulation on digital operational resilience for the financial sector (DORA) including local operation requirement
Description
Implemented Regulation on digital operational resilience for the financial sector (DORA) including local operation requirement
On 17 January 2025, the Regulation on digital operational resilience for the financial sector (DORA) is implemented. The Regulation includes security requirements to mitigate the risks arising from the digital finance sector due to the emergence of decentralised finance. Furthermore, the Regulation requires information and communications technology (ICT) third-party providers from countries outside the European Union and delivering critical services to financial entities to open a subsidiary in the EU in order for the authorities to ensure compliance with the security requirements.
Original sourceScope
Policy Area
Other operating conditions
Policy Instrument
Local operations requirement
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies), DLT development, infrastructure provider: cloud computing, storage and databases
Implementation Level
supranational
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2020-09-24
under deliberation
2021-11-24
under deliberation
2021-12-07
under deliberation
2022-05-10
under deliberation
2022-11-10
under deliberation
2022-11-28
adopted
2023-01-16
in grace period