Share on LinkedInShare on LinkedIn

ARTICLE · 07 MARCH 2025

DORA Rollout Update: CSSF Extends Weekend And Public Holiday Reporting Deadline For Luxembourg Financial Institutions

The Digital Operational Resiliance Act (DORA) - a cornerstone regulatory framework in the financial sector enhancing cybersecurity practices and standards across the EU. On 28 February 2020...

LuxembourgFinance and Banking

Key objectives include:

1. Standardizing cybersecurity regulations: Ensuring consistent regulatory technical standards for cybersecurity across the EU

2. Protecting critical services: Safeguarding critical and essential services from potential vulnerabilities and cyberattacks

3. Incident reporting: Mandating the reporting of major ICT incidents to the competent national authority (CSSF in Luxembourg)

Reporting Obligations in Luxembourg

Luxembourg entities must report ICT incidents to the CSSF by 12 noon on the next working day if they occur on weekend days or public holidays (as specified in Article 5 of the RTS). However, some entities (material entities) with significant activities must report on the same day, regardless of whether it's a non-working day.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from