§ DORA · Article 58
DORA Article 58: Obligations, Deadlines & Penalties
At a glance
Article 58 of the DORA imposes 4 obligations on Commission. At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 58
Obligation 1
The Commission shall carry out a review and submit a report to the European Parliament and the Council, accompanied by a legislative proposal where appropriate, covering specific criteria and regimes related to ICT third-party providers and oversight.
Regulation (EU) 2022/2554, Article 58, Article 58
- Obligated entity
-
Commission
- Action required
-
review
- Deadline
-
17 January 2028
- Penalty
-
—
Obligation 2
The Commission shall assess the need for increased cyber resilience of payment systems and the appropriateness of extending the scope of the Regulation to operators of payment systems and entities involved in payment-processing activities.
Regulation (EU) 2022/2554, Article 58, Article 58
- Obligated entity
-
Commission
- Sector scope
- payment systems
- Action required
-
assess
- Deadline
-
17 July 2023
- Penalty
-
—
Obligation 3
The Commission shall submit a report to the European Parliament and the Council regarding the assessment of payment systems cyber resilience and scope extension.
Regulation (EU) 2022/2554, Article 58, Article 58
- Obligated entity
-
Commission
- Sector scope
- payment systems
- Action required
-
report
- Deadline
-
17 July 2023
- Penalty
-
—
Obligation 4
The Commission shall carry out a review and submit a report to the European Parliament and the Council, accompanied by a legislative proposal where appropriate, on the appropriateness of strengthened requirements for statutory auditors and audit firms regarding digital operational resilience.
Regulation (EU) 2022/2554, Article 58, Article 58
- Obligated entity
-
Commission
- Sector scope
- statutory auditors and audit firms
- Action required
-
review
- Deadline
-
17 January 2026
- Penalty
-
—
§ Frequently asked
Questions about Article 58
Who must comply with Article 58 of the DORA?
+
Commission.
What does Article 58 of the DORA require?
+
review assess report
What is the compliance deadline for DORA Article 58?
+
17 January 2026; 17 January 2028; 17 July 2023