CLAIM-2026-08-28-12

Commission Delegated Regulation (EU) 2025/532 of 24 March 2025 sets the regulatory technical standards specifying the elements a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions, and entered into force on 22 July 2025.

Why it matters

It is the checklist that applies before a bank permits a third-party agent into a critical or important function, and it has been in force for over a year.

Sources

• eurlex2025commissio