European Insurance and Occupational Pensions Authority joins EBA and ESMA in endorsing European Commission amendments to the DORA subcontracting RTS

The European Supervisory Authorities, including the European Insurance and Occupational Pensions Authority, published an Opinion responding to the European Commission’s rejection of the draft regulatory technical standards on subcontracting under the Digital Operational Resilience Act. The Opinion accepts the Commission’s assessment that parts of the original draft exceeded the mandate in DORA and confirms the Commission’s proposed amendments bring the RTS within scope, so the ESAs do not recommend additional changes. The RTS is intended to specify the elements financial entities must determine and assess when subcontracting ICT services that support critical or important functions. The ESAs submitted their original draft RTS to the Commission on 17 July 2024, and the Commission notified the ESAs on 21 January 2025 that it rejected the draft under the ESAs Regulations. The ESAs encourage the Commission to proceed with adopting the RTS, as amended, without further delay.