Licentium

From the journal

ESMA Overview of Digital Operational Resilience Act (DORA)

The European Securities and Markets Authority (ESMA) has detailed the Digital Operational Resilience Act (DORA), which enhances ICT security for financial entities, effective from 17 January 2025.

1 min read

The Digital Operational Resilience Act (DORA) is now in force as of 16 January 2023 and will apply from 17 January 2025. DORA requires financial entities to strengthen their information and communication technology (ICT) security and manage ICT risks effectively.

DORA is established under Regulation (EU) 2022/2554, which sets forth requirements for ICT risk management and oversight of critical third-party ICT service providers.

DORA applies to 21 different types of financial entities, including banks, investment firms, and payment institutions, as identified by the European Supervisory Authorities (ESAs).

Entities must prepare their internal ICT risk management frameworks and ensure oversight of third-party ICT service providers before the regulation takes effect on 17 January 2025.

Source: ESMA, official publication, retrieved 2026-07-31

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.

Ready to launch without the regulatory guesswork?

Book a 30-minute consultation with a senior advisor and talk through your route.

Get Started

Where to go from here

Try Licentium AI

Licentium's AI workspace for regulatory questions. Web3 and AI teams shipping fast.

Browse the Fintech Licensing Hub

Jurisdiction-by-jurisdiction guides on licensing pathways, timelines, and costs.

Talk to us

Book a 30-minute consultation. We'll map your path and tell you what's required.