On 30 May 2024, the following Commission Delegated acts complementing the Digital Operational Resilience Act (DORA) were published in the Official Journal of the European Union (OJ):
- Commission Delegated Regulation (EU) 2024/1502 specifying the criteria for the designation of ICT third-party service providers as critical for financial entities.
- Commission Delegated Regulation (EU) 2024/1505 determining the amount of the oversight fees to be charged by the Lead Overseer to critical ICT third-party service providers and the way in which those fees are to be paid.
The two delegated acts had already been adopted by the EC on 22 February.
Next steps The Delegated Regulations will enter into force 20 days from the day of publication in the Official Journal of the EU.
Insurance Europe