This is the regulatory technical standard (RTS) on subcontracting ICT services as adopted by the European Commission according to DORA Article 30(5), using the final draft available from the European Banking Authority (EBA) as source. The RTS was published in July 2024 and is expected to become applicable on 17 January 2025 alongside DORA.

This text is provided as-is and should not be relied upon as an authoritative source. Instead, consult the Official Journal for the authoritative version once published.

On 7 March 2025, the European Supervisory Authorities (EBA, EIOPA, and ESMA – the ESAs) issued an Opinion on the European Commission’s (EC) rejection of the draft RTS on subcontracting ICT services. The EC rejected the original draft RTS on the grounds that certain elements exceeded the powers granted to the ESAs under DORA.

The ESAs' Opinion acknowledges the EC's assessment and confirms that the proposed amendments align the draft RTS with DORA’s mandate. As a result, the ESAs do not recommend any further changes beyond those already proposed by the EC. For more details, you can access the full opinion here: ESAs Opinion on the rejection of the RTS on subcontracting under DORA.

Our commitment is to continuously enhance this platform, improving readability and navigation for your convenience.