Skip to main content
European Commission logo
en
Business, Economy, Euro
Finance

Implementing and delegated acts - DORA

Find links to implementing and delegated acts for Regulation 2022/2554/EU on digital operational resilience.

The Regulation on Digital Operational Resilience (DORA) gives the Commission the power to adopt delegated and implementing acts to specify how competent authorities and market participants need to comply with the obligations laid down in the regulation.

Latest

  1. 2 July 2025
    Publication in the Official Journal

    Commission Delegated Regulation (EU) 2025/532 of 24 March 2025 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions

  2. 24 March 2025
    Publication in the Official Journal

    Commission Delegated Regulation (EU) 2025/420 of 16 December 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards to specify the criteria for determining the composition of the joint examination team ensuring a balanced participation of staff members from the ESAs and from the relevant competent authorities, their designation, tasks and working arrangements

  3. 20 February 2025
    Publication in the Official Journal

    Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats

Documents

  • 2 JULY 2025
DORA - Implementing and delegated acts: full list
English
(78.22 KB - PDF)
Download

Communications to the Commission

  1. 22 January 2025

    Communication C(2025)251 on the intention to reject and further adopt with amendments the draft Commission Delegated Regulation supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions.

  2. 25 July 2024

    Communication C(2024)5184 on the intention to reject and further adopt with amendments the draft Commission Implementing Regulation supplementing Regulation (EU) 2022/2554 with regard to implementing technical standards on standard templates for the register of information.