Question ID: DORA219 - 3305
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: ICT third-party risk management (DORA)
Article: 30(5)
Status: Rejected
Date of submission: 26 Mar 2025
Question
We read about European Commission's rejection of the RTS (2554) on Subcontracting stating that the draft RTS on Subcontracting exceeds the mandate given in Article 30(5) DORA https://finance.ec.europa.eu/document/download/9a7139d5-1cbf-4dca-a5cf-853467b375c7_en?filename=250124-letter-esas_en.pdf
Please advise when the 30(5)-related RTS is planned to be published.
EIOPA answer
This question has been rejected because it relates to acts which are under consultation, in the legislative process or not yet in force.