Regulatory deadline
DORA — Digital Operational Resilience Act applies
EU (EBA/ESMA/EIOPA) · EU
Date
2025-01-17
Status
In force since 2025-01-17
Type
Deadline
Authority
EU (EBA/ESMA/EIOPA)
What changes
Financial entities must run an ICT risk-management framework, keep a register of ICT/AI third-party arrangements, report major ICT incidents and perform resilience testing.
What to do
Fold AI/cloud systems into your DORA ICT risk framework, third-party register and incident-reporting playbook.
Who it applies to
use in Credit & financial scoring, Insurance pricing / risk