Question ID: DORA 193 - 3207
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: ICT third-party risk management (DORA)
Article: 28
Status: Rejected
Date of submission: 13 Dec 2024
Question
Can Social Media usage (e.g. for public relations) be considered an ICT-service under DORA?
Background of the question
Strictly going by the DORA criteria, this could arguably be the case. However, it is unlikely that Meta, X,… will adapt their terms and conditions to include the key contractual provisions of DORA Article 30. Therefore, agreeing that social media use constitutes an ICT-service might effectively ban financial entities from using them.
EIOPA answer
This question has been rejected because the matter falls within the scope of Q&A 030.