SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

All regulations

DORA

DORA: Regulation (EU) 2022/2554 · CELEX 32022R2554 · Applies from 2025-01-17

Summary

What is DORA?: The EU regulation on digital operational resilience for the financial sector.
Who is covered?: Financial entities and their critical ICT service providers in the EU.
When does it apply?: Applies from 17 January 2025.
What are the main obligations?: ICT risk management and governance (art. 5 and 6), incident reporting (art. 17 and 19), resilience testing and contractual requirements towards ICT providers (art. 28 and 30).
What are the most common risks?: Late incident reporting, insufficient testing and weak provider contracts. Supervision and penalties follow national competence under the regulation.
Which judgments affect the interpretation?: No established case law yet; supervisory guidance is developing.

What changed today?

No real changes in the last day. Last checked 2026-10-16.

Machine-readable change feed

Who is affected?

Roles with verified obligations

financial-entity

Entity types in scope

Credit institutions · Art. 2(1)(a)
Payment institutions · Art. 2(1)(b)
Account information service providers · Art. 2(1)(c)
Electronic money institutions · Art. 2(1)(d)
Investment firms · Art. 2(1)(e)
Crypto-asset service providers and issuers of asset-referenced tokens · Art. 2(1)(f)
Central securities depositories · Art. 2(1)(g)
Central counterparties · Art. 2(1)(h)
Trading venues · Art. 2(1)(i)
Trade repositories · Art. 2(1)(j)
Managers of alternative investment funds · Art. 2(1)(k)
Management companies · Art. 2(1)(l)
Data reporting service providers · Art. 2(1)(m)
Insurance and reinsurance undertakings · Art. 2(1)(n)
Insurance intermediaries, reinsurance intermediaries and ancillary insurance intermediaries · Art. 2(1)(o)
Institutions for occupational retirement provision · Art. 2(1)(p)
Credit rating agencies · Art. 2(1)(q)
Administrators of critical benchmarks · Art. 2(1)(r)
Crowdfunding service providers · Art. 2(1)(s)
Securitisation repositories · Art. 2(1)(t)

Machine-readable feed: who is affected by today's changes

Key articles

DORA art. 5 DORA art. 6 DORA art. 17 DORA art. 19 DORA art. 28 DORA art. 30 Full act

Article agents

Each article as its own node with legal text, obligations, affected roles and the turnover framework the act sets.

DORA Agent, art. 5 DORA Agent, art. 6 DORA Agent, art. 17 DORA Agent, art. 19 DORA Agent, art. 28 DORA Agent, art. 30 All article agents

Agents

DORA major ICT-related incident reporting · Does this apply to me?

Case law and judgment chains

Not in the register yet. not_in_register

Source: NovaCopilot