CLAIM-2026-09-24-09

Article 9(3)(c) of DORA, Regulation (EU) 2022/2554, requires financial entities to prevent the lack of availability, the impairment of the authenticity and integrity, the breaches of confidentiality and the loss of data, and DORA has applied since 17 January 2025.

Why it matters

It is an in-force duty with no risk tier and no transitional period that reaches a substituted approval directly, because the pending task is data and the approval record is a record whose authenticity the substitution destroys.

Sources

• digitaloper2025article
• chambersand2025countdown