Legal sources with official primary sources

Printed ·

Hopp til innhold
Hopp til svaret

Kildestatus og lesedato vises separat. Lesedato er ikke kildeverifisering.

Agent · dora-2022-2554-30

DORA artikel 30: Key contractual provisions

Vad är en agent? Agenter verkställer beslut.

Strukturelt tre: artikkelens egne punkter, ordrett.

Søkes også som: DORA-forordningen artikkel 30 · digital operasjonell motstandsdyktighet artikkel 30 · forordning (EU) 2022/2554 artikkel 30

What must a contract with an ICT provider contain under DORA?

Under Article 30 of DORA financial entities must have a written contract with every ICT service provider. The contract must describe the services, where data is processed, availability and security requirements, termination rights and cooperation with the supervisor. Every contract must set service levels. For critical or important functions it must also contain measurable service levels, contingency plans, unrestricted audit rights and an exit strategy.

Obligation
A written contract with set minimum content for every ICT service.
Deadline
Applies since 17 January 2025, including existing contracts.
Source
DORA (EU) 2022/2554 Art. 30, CELEX 32022R2554

Read the full text · Source: NovaCopilot

CELEX 32022R2554 · 2026-08-18 · Vekt 86 · minimal-risk

ExtendedOperational weight but lower priority. Metered by volume, not per call, once metering is switched on.

DORAOffisiell kilde

Hva siden er
Agent, DORA artikel 30
Lest mot offisiell kilde
2026-08-18Utgått
Ansvarlig utgiver
ExploreWorld Legal, redaksjonenAnsvarsposisjon

Vanlige spørsmål om samme lov

Hvert spørsmål har et eget svar med kilde, praksis og lovsted.

NovaCopilot utleder et kort svar fra lovtekst og praksis, med kilden rett under. 5 svar per døgn er gratis.

NovaCopilot resonnerer: et kort svar på høyst 75 ord, bygget kun på vårt register, med kilden rett under.

Source: NovaCopilot

Jurisdiksjon

Samme agent, lest med ett lands øyne.

Inndata

  • in_scopeThe article applies to the situationboolean
  • punktParagraph of the articleenum (1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14)

Regeltre

  1. Hvis: alla(in_scope = true, punkt = 1)

    Paragraph 1 applies

    1. The rights and obligations of the financial entity and of the ICT third-party service provider shall be clearly allocated and set out in writing. The full contract shall include the service level agreements and be documented in one written document which shall be available to the parties on paper, or in a document with another downloadable, durable and accessible format.

    Punkt 1

  2. Hvis: alla(in_scope = true, punkt = 2)

    Paragraph 2 applies

    2. The contractual arrangements on the use of ICT services shall include at least the following elements:

    Punkt 2

  3. Hvis: alla(in_scope = true, punkt = 3)

    Paragraph 3 applies

    (a)

    Punkt 3

  4. Hvis: alla(in_scope = true, punkt = 4)

    Paragraph 4 applies

    a clear and complete description of all functions and ICT services to be provided by the ICT third-party service provider, indicating whether subcontracting of an ICT service supporting a critical or important function, or material parts thereof, is permitted and, when that is the case, the conditions applying to such subcontracting;

    Punkt 4

  5. Hvis: alla(in_scope = true, punkt = 5)

    Paragraph 5 applies

    (b)

    Punkt 5

  6. Hvis: alla(in_scope = true, punkt = 6)

    Paragraph 6 applies

    the locations, namely the regions or countries, where the contracted or subcontracted functions and ICT services are to be provided and where data is to be processed, including the storage location, and the requirement for the ICT third-party service provider to notify the financial entity in advance if it envisages changing such locations;

    Punkt 6

  7. Hvis: alla(in_scope = true, punkt = 7)

    Paragraph 7 applies

    (c)

    Punkt 7

  8. Hvis: alla(in_scope = true, punkt = 8)

    Paragraph 8 applies

    provisions on availability, authenticity, integrity and confidentiality in relation to the protection of data, including personal data;

    Punkt 8

  9. Hvis: alla(in_scope = true, punkt = 9)

    Paragraph 9 applies

    (d)

    Punkt 9

  10. Hvis: alla(in_scope = true, punkt = 10)

    Paragraph 10 applies

    provisions on ensuring access, recovery and return in an easily accessible format of personal and non-personal data processed by the financial entity in the event of the insolvency, resolution or discontinuation of the business operations of the ICT third-party service provider, or in the event of the termination of the contractual arrangements;

    Punkt 10

  11. Hvis: alla(in_scope = true, punkt = 11)

    Paragraph 11 applies

    (e)

    Punkt 11

  12. Hvis: alla(in_scope = true, punkt = 12)

    Paragraph 12 applies

    service level descriptions, including updates and revisions thereof;

    Punkt 12

  13. Hvis: alla(in_scope = true, punkt = 13)

    Paragraph 13 applies

    (f)

    Punkt 13

  14. Hvis: alla(in_scope = true, punkt = 14)

    Paragraph 14 applies

    the obligation of the ICT third-party service provider to provide assistance to the financial entity at no additional cost, or at a cost that is determined ex-ante, when an ICT incident that is related to the ICT service provided to the financial entity occurs;

    Punkt 14

Hvis ingen regel treffer: The article is not stated to apply, or no paragraph is selected. The agent abstains rather than guesses.

Artikkelteksten som ble lest

  1. 11. The rights and obligations of the financial entity and of the ICT third-party service provider shall be clearly allocated and set out in writing. The full contract shall include the service level agreements and be documented in one written document which shall be available to the parties on paper, or in a document with another downloadable, durable and accessible format.
  2. 22. The contractual arrangements on the use of ICT services shall include at least the following elements:
  3. 3(a)
  4. 4a clear and complete description of all functions and ICT services to be provided by the ICT third-party service provider, indicating whether subcontracting of an ICT service supporting a critical or important function, or material parts thereof, is permitted and, when that is the case, the conditions applying to such subcontracting;
  5. 5(b)
  6. 6the locations, namely the regions or countries, where the contracted or subcontracted functions and ICT services are to be provided and where data is to be processed, including the storage location, and the requirement for the ICT third-party service provider to notify the financial entity in advance if it envisages changing such locations;
  7. 7(c)
  8. 8provisions on availability, authenticity, integrity and confidentiality in relation to the protection of data, including personal data;
  9. 9(d)
  10. 10provisions on ensuring access, recovery and return in an easily accessible format of personal and non-personal data processed by the financial entity in the event of the insolvency, resolution or discontinuation of the business operations of the ICT third-party service provider, or in the event of the termination of the contractual arrangements;
  11. 11(e)
  12. 12service level descriptions, including updates and revisions thereof;
  13. 13(f)
  14. 14the obligation of the ICT third-party service provider to provide assistance to the financial entity at no additional cost, or at a cost that is determined ex-ante, when an ICT incident that is related to the ICT service provided to the financial entity occurs;

Opphav

treatyTFEU art. 288 (förordning)
act32022R2554
chapter-
article30
paragraphs14
jurisdictionEuropean Union (EU)
supervisorFinansinspektionen: Sweden
national-

Grensesnitt

callhttps://legal.exploreworldai.com/api/public/v1/agents/dora-2022-2554-30/run
methodGET
outputmatched, outcome, trace, missing, hash
Kvote60 anrop per minut och adress, utan nyckel
stabilityRegelträdet versioneras. En ändring byter artefakthash, aldrig adress.

Hasher

textsha256:39ccd6324a0eec7f5b7170e4f6ef07f7cadcee04cdd3bb96493de517cb495bb2
scriptsha256:afca237054593e464c503830d21eb2b0278d58dd1ef193ad6ac79d1dff51102b
enginesha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0
agentsha256:bb364331b3128df9d4cca27f8833719cb4fa7e6e9d1e0c7d28f7c421be0a04a6
versionagent-engine-1+legal-2026-11-02 / bb364331b3128df9

Artefakter

Ingen rådgivning. Deterministisk regeluppslagning. Ingen juridisk rådgivning, inget efterlevnadsbeslut, ingen bedömning av ett enskilt ärende.

Sitering: 32022R2554 art. 30, Key contractual provisions. NovaCopilot, https://legal.exploreworldai.com/agent/dora-2022-2554/artikel-30 (hämtad 2026-08-18, bevis sha256:d63e479942f73e95, bygge legal-2026-11-02).