Updated 04/07/2025
Coming into force on 22/07/2025

Initial Legal Act
References (2)
eba.europa.eu/activities/single-rulebook/regulatory-activities/operational-resilience/joint-regulatory-technical-subcontracting
02/07/2025
Delegated Regulation 2025/532 published in OJ
07/03/2025
JC 2025 06
Opinion published
07/03/2025
JC 2025 06
Other published
07/03/2025
JC 2025 06
Opinion published
22/01/2025
C(2025) 251 final
Other published
22/01/2025
C(2025) 251 final
Other published
26/07/2024
JC 2024 53
Final Draft published
26/07/2024
JC 2024 53
Final Draft published
26/07/2024
JC/2024/53
Final Draft published
27/11/2023
JC/2023/67
Consultation published
27/11/2023
JC/2023/67
Consultation published
27/11/2023
JC/2023/67
Consultation published
Search within this legal act
DORA ToolDelegated Regulation 2025/532

Delegated Regulation 2025/532

Commission Delegated Regulation (EU) 2025/532 of 24 March 2025 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions

RecitalsArticle 1 - Overall risk profile and complexityArticle 2 - Group applicationArticle 3 - Due diligence and risk assessment regarding the use of subcontractors that support critical or important functionsArticle 4 - Conditions under which ICT services that support critical or important functions or a material part thereof may be subcontracted Article 5 - Material changes to subcontracting arrangements of ICT services that support critical or important functions or material parts thereofArticle 6 - Termination of the contract between the financial entity and the ICT third-party service provider Article 7 - Entry into force