European Commission Adopts Regulatory Technical Standards on Conduct of Oversight Activities under EU Digital Operational Resilience Act

The European Commission has adopted a Commission Delegated Regulation supplementing the EU Digital Operational Resilience Act with regard to Regulatory Technical Standards on harmonization of conditions enabling the conduct of the oversight activities. The draft RTS cover: (i) the information to be provided by an ICT third-party service provider in the application for a voluntary request to be designated as critical; (ii) the information to be submitted by the ICT third–party service providers that is necessary for the Lead Overseer to carry out its duties; and (iii) the details of the competent authorities' assessment of the measures taken by critical third party providers based on the recommendations of the Lead Overseer. Separate RTS will be adopted focusing on the criteria for determining the composition of the joint examination team, their designation, tasks, and working arrangements. The Delegated Regulation shall enter into force 20 days after publication in the OJ. DORA will apply as of January 17, 2025.

Return to main website.