{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-30","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-30)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:ce0366","proof":"sha256:538bc1e0fcadce985735a02122202bee70da77d4191da10cb987dbf24bc30084","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:dora:art-30","act":"dora-2022-2554","article":"30","text_sha256":"39ccd6324a0eec7f5b7170e4f6ef07f7cadcee04cdd3bb96493de517cb495bb2","obligations":["obligation:eu:dora-2022-2554-art-30-financial-entity"],"agent":"agent:eu:dora","name":"NovaCopilot DORA Agent, Article 30","title":{"en":"Key contractual provisions","sv":"Viktiga avtalsbestämmelser","de":"Wesentliche Vertragsbestimmungen"},"text":{"lang":"en","paragraphs":["1. The rights and obligations of the financial entity and of the ICT third-party service provider shall be clearly allocated and set out in writing. The full contract shall include the service level agreements and be documented in one written document which shall be available to the parties on paper, or in a document with another downloadable, durable and accessible format.","2. The contractual arrangements on the use of ICT services shall include at least the following elements:","(a)","a clear and complete description of all functions and ICT services to be provided by the ICT third-party service provider, indicating whether subcontracting of an ICT service supporting a critical or important function, or material parts thereof, is permitted and, when that is the case, the conditions applying to such subcontracting;","(b)","the locations, namely the regions or countries, where the contracted or subcontracted functions and ICT services are to be provided and where data is to be processed, including the storage location, and the requirement for the ICT third-party service provider to notify the financial entity in advance if it envisages changing such locations;","(c)","provisions on availability, authenticity, integrity and confidentiality in relation to the protection of data, including personal data;","(d)","provisions on ensuring access, recovery and return in an easily accessible format of personal and non-personal data processed by the financial entity in the event of the insolvency, resolution or discontinuation of the business operations of the ICT third-party service provider, or in the event of the termination of the contractual arrangements;","(e)","service level descriptions, including updates and revisions thereof;","(f)","the obligation of the ICT third-party service provider to provide assistance to the financial entity at no additional cost, or at a cost that is determined ex-ante, when an ICT incident that is related to the ICT service provided to the financial entity occurs;"],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32022R2554","read_at":"2026-08-18"},"sha256":"09391df8e79d784596804dd238af831e3275c621321e0dc662f19ba7bdc2db22","duties":[{"id":"obligation:eu:dora-2022-2554-art-30-financial-entity","role":"financial-entity","duty":"Include the key contractual provisions in contracts with ICT third-party service providers."}],"applies_to_role":{"status":"verified","roles":["financial-entity"],"entity_types":[{"role":"credit-institution","parent_role":"financial-entity","article":"2(1)(a)"},{"role":"payment-institution","parent_role":"financial-entity","article":"2(1)(b)"},{"role":"account-information-service-provider","parent_role":"financial-entity","article":"2(1)(c)"},{"role":"electronic-money-institution","parent_role":"financial-entity","article":"2(1)(d)"},{"role":"investment-firm","parent_role":"financial-entity","article":"2(1)(e)"},{"role":"crypto-asset-service-provider","parent_role":"financial-entity","article":"2(1)(f)"},{"role":"central-securities-depository","parent_role":"financial-entity","article":"2(1)(g)"},{"role":"central-counterparty","parent_role":"financial-entity","article":"2(1)(h)"},{"role":"trading-venue","parent_role":"financial-entity","article":"2(1)(i)"},{"role":"trade-repository","parent_role":"financial-entity","article":"2(1)(j)"},{"role":"aifm","parent_role":"financial-entity","article":"2(1)(k)"},{"role":"management-company","parent_role":"financial-entity","article":"2(1)(l)"},{"role":"data-reporting-service-provider","parent_role":"financial-entity","article":"2(1)(m)"},{"role":"insurer","parent_role":"financial-entity","article":"2(1)(n)"},{"role":"insurance-intermediary","parent_role":"financial-entity","article":"2(1)(o)"},{"role":"iorp","parent_role":"financial-entity","article":"2(1)(p)"},{"role":"credit-rating-agency","parent_role":"financial-entity","article":"2(1)(q)"},{"role":"critical-benchmark-administrator","parent_role":"financial-entity","article":"2(1)(r)"},{"role":"crowdfunding-service-provider","parent_role":"financial-entity","article":"2(1)(s)"},{"role":"securitisation-repository","parent_role":"financial-entity","article":"2(1)(t)"}]},"applies_to_industry":{"status":"derived","industries":["banking","insurance"]},"cross_industry_chains":{"status":"verified","shape":"rule → obligation → control → industry","chains":[{"id":"chain:dora~dora-art.-30","rule":"dora","obligation":"Contractual provisions with ICT third-party providers","control":"DORA art. 30","industries":["financial-services","insurance","technology"],"entity_types":[{"role":"credit-institution","label":"Credit institutions","article":"DORA art. 2(1)(a)"},{"role":"payment-institution","label":"Payment institutions","article":"DORA art. 2(1)(b)"},{"role":"account-information-service-provider","label":"Account information service providers","article":"DORA art. 2(1)(c)"},{"role":"electronic-money-institution","label":"Electronic money institutions","article":"DORA art. 2(1)(d)"},{"role":"investment-firm","label":"Investment firms","article":"DORA art. 2(1)(e)"},{"role":"crypto-asset-service-provider","label":"Crypto-asset service providers and issuers of asset-referenced tokens","article":"DORA art. 2(1)(f)"},{"role":"central-securities-depository","label":"Central securities depositories","article":"DORA art. 2(1)(g)"},{"role":"central-counterparty","label":"Central counterparties","article":"DORA art. 2(1)(h)"},{"role":"trading-venue","label":"Trading venues","article":"DORA art. 2(1)(i)"},{"role":"trade-repository","label":"Trade repositories","article":"DORA art. 2(1)(j)"},{"role":"aifm","label":"Managers of alternative investment funds","article":"DORA art. 2(1)(k)"},{"role":"management-company","label":"Management companies","article":"DORA art. 2(1)(l)"},{"role":"data-reporting-service-provider","label":"Data reporting service providers","article":"DORA art. 2(1)(m)"},{"role":"insurer","label":"Insurance and reinsurance undertakings","article":"DORA art. 2(1)(n)"},{"role":"insurance-intermediary","label":"Insurance intermediaries, reinsurance intermediaries and ancillary insurance intermediaries","article":"DORA art. 2(1)(o)"},{"role":"iorp","label":"Institutions for occupational retirement provision","article":"DORA art. 2(1)(p)"},{"role":"credit-rating-agency","label":"Credit rating agencies","article":"DORA art. 2(1)(q)"},{"role":"critical-benchmark-administrator","label":"Administrators of critical benchmarks","article":"DORA art. 2(1)(r)"},{"role":"crowdfunding-service-provider","label":"Crowdfunding service providers","article":"DORA art. 2(1)(s)"},{"role":"securitisation-repository","label":"Securitisation repositories","article":"DORA art. 2(1)(t)"},{"role":"ict-third-party-service-provider","label":"ICT third-party service providers","article":"DORA art. 2(1)(u)"}]}]},"revenue_exposure":{"status":"not_in_register","reason":"member_state_penalties","sanction_article":"50","source_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","via":"article 50"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/dora-2022-2554/artikel-30","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=dora","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=dora"},"llm_used":false,"hash":"sha256:538bc1e0fcadce985735a02122202bee70da77d4191da10cb987dbf24bc30084","version":"legal-2026-11-02","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:538bc1e0fcadce985735a02122202bee70da77d4191da10cb987dbf24bc30084","revalidate_after":"2026-11-03T06:53:26.547Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-30","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T05:53:26.547Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-30","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":3333}}