- Question ID
-
2024_7046
- Legal act
- Directive 2022/2556/EU (DORA)
- Topic
- Other DORA topics
- Article
-
3
- Paragraph
-
21
- COM Delegated or Implementing Acts/RTS/ITS/GLs/Recommendations
- Not applicable
- Article/Paragraph
-
n/a
- Type of submitter
-
Individual
- Subject matter
-
Definition of ICT services
- Question
-
Does the licensing of software by a third party to a financial entity for use on the financial entity's own premises meet the definition of "ICT services"
- Background on the question
-
The definition under article 3(21) does not provide a list of services that could be considered as ICT services. The definition mentions that the services must be provided "through ICT systems" but it is not clear whether those systems must be operated by the same entity that provides the software. The phrase "on an ongoing basis" is also not clear: would a software licensing agreement be considered to be "on an ongoing basis". The mention of hardware services (including technical support via software updates) perhaps provides a useful analogy - is the licensing of on prem software (including updates and technical support) equivalent?
Recital 63 mentions "providers of...software" as being included in a wide range of ICT TPPs, but is that just SaaS software providers of licensors of on prem software too?
The ESAs Report on the landscape of ICT third-party providers in the EU mentions "software and application services (IT development; off the shelf software packages, licensing, and installation thereof etc)" as one of the seven ICT service categories. This seems to be the most definitive expansion on the definition to date but an authoritative Q&A answer to this question would be welcomed to aid preparation ahead of DORA's effective date.
- Submission date
- Rejected publishing date
-
- Rationale for rejection
-
This question has been rejected because the matter it refers to is in the process of being answered in Q&A DORA 30 (EIOPA Q&A 2999)
- Status
-
Rejected question