EBA logo

EBA E-mail alert August 15, 2025

Final Q&As

Question ID: 2025_7309

Topic
Register of information (DORA)
Subject matter
ANNUAL REPORT ON NEW ARRANGEMENTS ON THE USE OF ICT SERVICES

Does Article 28(3) DORA require a separate and specific communication in addition to the Register of Information, or whether the communication of such data is already fulfilled through the annual submission of the same Register, constituting a single compliance obligation?

In the event that a separate communication is required in addition to the annual submission of the Register of Information, what is the meaning of the term 'categories of third-party ICT service providers'?

You can edit or cancel your subscription at any time. This is a test version of the newsletter.
Please do not reply to this message. If you have questions, please visit our contact page.
Please refer to EBA’s Legal notice regarding the handling of your personal data.
© European Banking Authority - https://www.eba.europa.eu