DORA

Subscribe to DORA via RSS
Abstract financial charts with upward arrow on a blue background. 3D Rendering

Crypto custody services under the microscope: EU regulators turn their attention to compliance with digital operational resilience rules.

By Stuart Davis, Gabriel Lakeman, and Alain Traill

On 8 July 2026, the European Securities and Markets Authority (ESMA) announced the launch of a Common Supervisory Action (CSA) focusing on the digital operational resilience of cryptoasset service providers (CASPs), with a particular emphasis on custody services.

ESMA has framed the initiative as a response to its risk-based supervisory priorities, which…

GettyImages-1194981801_Abstract blue

The deadline is fast approaching for in-scope financial entities and their ICT service providers to conform to the EU’s new digital operational resilience regulation.

By Christian F. McDermott and Alain Traill

With effect from 17 January 2025, a broad range of EU financial entities will be subject to the new EU regulation on digital operational resilience for the financial sector (DORA), with significant impact for firms and their third-party ICT service providers. As the new landscape takes shape, below is an overview of some of the key changes and steps that impacted financial entities and providers should be taking ahead of the deadline.