DORA: digital resilience rules for the financial sector
The Digital Operational Resilience Act has applied to banks, insurers, investment firms and their critical ICT providers since 17 January 2025. If you sell IT or connectivity services to a financial entity, expect contract clauses on incident reporting, exit plans, audit rights and testing, because your customer has to pass those obligations on.
EUR-Lex Date reported, not yet checked against the official text.
Ticks are kept in this browser only. Sign in to the client portal to share them with your team.