The deadline is fast approaching for in-scope financial entities and their ICT service providers to conform to the EU’s new digital operational resilience regulation.

By Christian F. McDermott and Alain Traill

With effect from 17 January 2025, a broad range of EU financial entities will be subject to the new EU regulation on digital operational resilience for the financial sector (DORA), with significant impact for firms and their third-party ICT service providers. As the new landscape takes shape, below is an overview of some of the key changes and steps that impacted financial entities and providers should be taking ahead of the deadline.

The DSA has a broad scope and regulates many aspects of digital services.

By Gail E. Crawford, Jean-Luc Juhan, Susan Kempe-Mueller, Deborah J. Kirk, Lars Kjølbye, Elisabetta Righini, Sven Völcker, Ben Leigh, Victoria Wan, and Amy Smyth

The Digital Services Act (DSA) is a key part of the EU’s digital regulation strategy, which seeks to modernise legal frameworks and create a safer and more open digital environment.

The DSA entered into