EU


DORA Check

By Renate Prinz on 31. October, 2024

Posted In Dora, EU

Digital threats and cyberattacks are increasing every year. In 2023, digital threats caused damages of more than €200 billion in Germany, of which 72% resulted from cyberattacks (source: Bitkom, study on economic protection 2023). To counter the threat to the system-critical financial sector, the EU has decided to implement a uniform, high level of security. The  Digital Operational Resilience Act (DORA)  is the answer.

The regulation on digital operational resilience is intended to reduce the risks arising from the ever-increasing dependence on information and communication technology in the financial sector. In particular, DORA is expected to reduce the risk of severe operational disruption arising from digital threats and cyberattacks, by focusing on the entire value chain. Notably, DORA subjects IT service providers to direct financial supervision – for the first time. DORA will apply to companies in the financial sector and their IT service providers from January 17, 2025 . It’s crucial for every company to check whether DORA applies to them and what measures need to be taken now, including reviewing outsourcing contracts for DORA compliance and internal IT infrastructure.

McDermott developed DORA Check to provide a first overview of the regulation to keep users informed about the legal essentials of DORA.

Click here to access the tool.


DORA takes effect: Digital resilience and cybersecurity in the EU

By Renate Prinz on 29. October, 2024

Posted In Dora, EU

McDermott Will & Emery’s financial regulatory partner Renate Prinz authored in Finextra that explored what DORA (the EU’s  Digital Operational Resilience Act) entails, what its contents and objectives are, and what relevant companies need to do now to be DORA compliant next year. Here you can read the full article.


What To Expect From The EU’s New PSD3, PSR AND FIDA Regulations

By Annabelle Rau | Renate Prinz on 08. November, 2023

Posted In EU

The Payment Services Directive II (PSD2) has changed the payment services industry in Europe. However, many details remain open and impractical and the implementation of the directive and the administrative practices of local financial supervisory authorities differ greatly in some cases. A reform is now pending with PSD3, which aims for a higher degree of harmonization and will bring with it many new requirements for payment service providers.What are the most important changes and challenges facing the industry? How can payment service providers prepare? Read the article by Renate Prinz and Annabelle Rau to find out how the planned PSD 3 directive, the Payment Services Regulation (PSR) and the Framework Regulation on Access to Financial Data (FIDA) could change the landscape of payment services.

Click here for the full article.