ESMA · ESMA_QA_2675 Question Rejected
Contractual agreement with ICT service providers
- Regulation
- Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)
- Article
- Art. 30, DORA
- Topic
- ICT third-party risk management
- Submitted
- 2025-10-28
Question
Art. 30 (1) & (2) of DORA demand that financial institutions have signed contractual agreements with all their ICT service providers, in particular in Art. 30(2) &(3) the elements that shall be included in the contractual arrangements are listed. Are ICT service providers permitted under DORA to charge the financial institutions "merely for signing" a DORA addendum or updated contractual arrangements in the framework of Art. 30, DORA?
No answer published yet.
This Q&A is published by European Securities and Markets Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.
Similar Q&As
More Q&As on this topic
📋 Track EU financial regulation continuously
Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.
14-day free trial. No credit card required.