Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 27 NOVEMBER 2023

Market Intelligence Thought Leadership Award Winner

What You Should Know About The EU Digital Operational Resilience Act

Alston & Bird LLP
Alston & Bird LLP
Contributor
Alston & Bird LLP

Alston & Bird LLP

Alston & Bird provides the highest-quality and most responsive legal counsel and services to...

View firm profile
Explore more from Alston & Bird LLP

The European Union's (EU) new Digital Operational Resilience Act (DORA) will go into effect in January 2025. Our Privacy, Cyber & Data Strategy Team digs into DORA...

European UnionPrivacy
Alice Portnoy
Alice Portnoy
Wim Nauwelaerts
Wim Nauwelaerts

Executive Summary

The European Union's (EU) new Digital Operational Resilience Act (DORA) will go into effect in January 2025. Our Privacy, Cyber & Data Strategy Team digs into DORA and discusses how the new law may impact businesses inside and outside the EU.

  • DORA imposes new risk management rules on financial entities (FEs) and their information and communication technology service providers (ICTSPs)
  • DORA will supplement and interact with other EU laws such as the Payment Services Directive, the General Data Protection Regulation, and the Data Governance Act
  • ICTSPs that support FEs subject to DORA and are considered critical or important will be required to establish a subsidiary in the EU

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

How Organisations Can Comply With European Interoperability Rules For Data Sharing And Data Exchange

The European Union's data strategy introduces comprehensive interoperability obligations through the GDPR, Data Act, and Data Governance Act, fundamentally transforming how organizations handle data portability, switching between service providers, and data intermediation services. Organizations providing data processing services and those operating as data intermediaries face new compliance requirements, registration procedures, and operational standards that demand immediate attention and strategic implem
European UnionPrivacy
Monard law
Monard law
Article

CJEU Judgment In The Jautiva Case

The Court of Justice of the European Union has ruled that Latvian legislation requiring unrestricted public access to shareholder information violates fundamental rights protections under the EU Charter. While the Court acknowledges the legitimacy of anti-money laundering, counter-terrorism, and sanctions objectives, it finds that these goals can be achieved through less intrusive measures that restrict access to competent authorities, obliged entities, and persons with legitimate interests. The judgment le
European UnionPrivacy
Monard law
Monard law
Article

Privacy, Cyber & Data Strategy Advisory | NAIC Summer Meeting Sharpens Focus On AI, Data, And Technology Governance

The National Association of Insurance Commissioners intensified its regulatory focus on artificial intelligence governance, third-party data models, and cybersecurity oversight at its Summer 2026 meeting. Regulators are shifting from principles-based guidance to examination-ready supervisory tools, emphasizing that insurers remain accountable for the technologies and vendors they deploy. The meeting revealed how AI risk evaluation, vendor oversight frameworks, and privacy modernization efforts are convergin
United StatesInsurance
Alston & Bird LLP
Alston & Bird LLP
Article

Privacy, Cyber & Data Strategy Advisory | Connected Devices And Software: New EU Cyber Incident Reporting Rules Take Effect

The EU Cyber Resilience Act's incident reporting obligations take effect on September 11, 2026, requiring manufacturers of connected devices and software to report certain vulnerabilities and cybersecurity incidents. This marks a critical milestone in EU cybersecurity regulation, introducing new compliance requirements for companies that may already face reporting obligations under other digital regulations.
European UnionTechnology
Alston & Bird LLP
Alston & Bird LLP
Article

AI Quarterly | A Review Of AI Law, Policy & Practice | 2026 Q3

Explore the latest developments in AI regulation, cybersecurity threats, and compliance frameworks as businesses navigate personalized pricing scrutiny, prompt injection attacks, and evolving transparency obligations. Discover how government initiatives and international intelligence agencies are responding to AI-driven vulnerabilities while organizations implement practical governance strategies across legal, privacy, and operational domains.
United StatesPrivacy
Alston & Bird LLP
Alston & Bird LLP
Article

The Digital Download | Alston & Bird’s Privacy & Data Security Newsletter | August 2026

Alston & Bird's quarterly Digital Download examines the rapidly evolving intersection of privacy, cybersecurity, and data strategy, highlighting how AI-driven threats are reshaping breach costs, regulatory frameworks, and organizational defense strategies. From IBM's 2026 breach report showing record-high costs to new government initiatives like the White House's Gold Eagle clearinghouse, the landscape demands heightened vigilance and sophisticated governance approaches.
United StatesPrivacy
Alston & Bird LLP
Alston & Bird LLP
Article

Privacy, Cyber & Data Strategy Advisory | Autonomous Hacking: Planning For The AI Cyber Agent That Goes Rogue

Artificial intelligence agents are gaining unprecedented autonomy and cyber capabilities, transforming theoretical risks into tangible legal liabilities. As AI systems independently exploit vulnerabilities and access unauthorized systems, organizations face complex questions about criminal and civil exposure under existing computer fraud laws. Understanding how autonomous agents can go rogue—and what legal frameworks apply when they do—has become essential for any company deploying these powerfu
United StatesTechnology
Alston & Bird LLP
Alston & Bird LLP