RegCORE – Client Alert | EU Digital Single Market
QuickTake
As discussed in comprehensive coverage available from PwC Legal
and PwC teams across our network, the EU's Regulation
2022/2554, informally known as the Digital Operational Resilience
Act – or DORA, is reshaping
third-party risk management (TPRM) practices and
the (digital) operational resilience requirements for the financial
services sector, including but not limited from information and
communication technology (ICT)-relate disruptions
and threats.
DORA has wide-reaching effects as well as extra-territorial
impact. DORA raises compliance challenges for meeting the
compliance deadline of 17 January 2025 as well as with a range of
other related EU legislative and regulatory rulemaking instruments
and supervisory expectations, including non-EU i.e. third country
frameworks of a similar nature that already exist or are in
development. Often these may have differing or competing demands
and compliance