EIOPA · DORA130 - 3174

Other DORA topics

Regulation
(EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Article
3
Topic
Other DORA topics
Submitted
2024-10-21
Answered
2025-08-08

Question

Can you please confirm that Articles 28-30 DORA will only apply to those contractual arrangements for "ICT Services" that are provided on continuous basis as a digital and data service, i.e. not to contractual arrangements for one-off provision of licenses or products?

Background

The draft ITS from ESAs regarding provision of information registers includes reporting categories such as "on-premise licensing" or "ICT consulting". However, these types of products/services are often provided on one-off basis, without actual access to the FI's infrastructure or data. It is therefore unclear how the requirements of DORA should be applied to the contractual arrangements for these types of products/services.

Answer

The question has been rejected because the definition of ICT service in Article 3(21) clearly mentions that ICT service shall be provided on an ongoing basis.

This Q&A is published by European Insurance and Occupational Pensions Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

More Q&As on this topic

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

14-day free trial. No credit card required.