DATE OF UPDATE: 24 March 2025
LINKS
Register of Commission Documents - C(2025)1682
JC 2025 06 ESAs Opinion on the rejection of the RTS on
subcontracting under DORA (PDF, 182KB)
DORA Compliance: What is an ICT Service?
CURRENT STATUS
The European Commission has adopted a Delegated Regulation
supplementing DORA and setting down regulatory technical standards
(RTS) (under Article 30(5) of DORA) for requirements when the use
of sub-contracted ICT services supporting critical or important
functions (or material parts of such functions) by ICT third-party
service providers is permitted by financial entities.
WHY IS THIS APPLICABLE TO CLIENTS?
The European Commission initially rejected a version of the
draft RTS because of concerns that requirements relating to the
chain of ICT sub-contractors went beyond the mandate given to the
European Supervisory Authorities (ESAs). The Joint Committee of the
ESAs subsequently accepted the Commission's
