DORA
Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)
Official text (opens in a new tab)Draft – legal and case law references not yet verified
In Plain Language
Requires banks, insurers and other financial firms to manage ICT risks, report major incidents, test their resilience and oversee third-party technology providers, including AI and cloud suppliers.
Key Dates
- Entry into force
- Applies
Verify Dates and status last checked 29 October 2026. Later amendments may have changed them; check the official text before relying on them.
Key Articles for AI
| Arts. 5–6 | ICT risk management framework. |
|---|---|
| Arts. 17–19 | ICT incident management and reporting. |
| Art. 28 | Managing ICT third-party risk. |
Use Cases Citing This Law
Related Sources
No sources linked yet.