Licentium

From the journal

ESAs issue guide on DORA oversight activities

The European Supervisory Authorities published a guide on oversight activities under the Digital Operational Resilience Act, focusing on ICT risks from AI in the financial sector.

1 min read

The European Supervisory Authorities (EBA, EIOPA, and ESMA) published a guide on July 15, 2025, detailing oversight activities under the Digital Operational Resilience Act (DORA). The guide outlines the processes used by the ESAs to oversee critical Information and Communication Technology third-party service providers.

The guide is not legally binding and does not replace existing EU legal requirements. It provides high-level explanations regarding the CTPP Oversight framework, governance structure, oversight processes, founding principles, and available tools for overseers.

The ESAs invite public financial entities and third-party providers to utilize this document to prepare for oversight implementation. The guide aims to enhance governance and supervision to address ICT risks associated with frontier AI models in the EU financial sector.

Source: ESMA, official publication, retrieved 2026-08-01

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.

Ready to launch without the regulatory guesswork?

Book a 30-minute consultation with a senior advisor and talk through your route.

Get Started

Where to go from here

Try Licentium AI

Licentium's AI workspace for regulatory questions. Web3 and AI teams shipping fast.

Browse the Fintech Licensing Hub

Jurisdiction-by-jurisdiction guides on licensing pathways, timelines, and costs.

Talk to us

Book a 30-minute consultation. We'll map your path and tell you what's required.