Timeline & Deadlines
Chronological Overview
Level 1 – Regulation
| Date | Milestone |
|---|---|
| 14.12.2022 | Adoption by EU Parliament and Council |
| 27.12.2022 | Publication in the Official Journal of the EU |
| 17.01.2023 | Entry into force (20 days after publication) |
| 17.01.2025 | Application – no further transition period |
Level 2 – RTS/ITS (Chronological)
| Date | Standard | Topic |
|---|---|---|
| 25.06.2024 | RTS 2024/1772 | Classification of ICT incidents |
| 25.06.2024 | RTS 2024/1773 | Contractual requirements for ICT service providers |
| 25.06.2024 | RTS 2024/1774 | ICT risk management framework |
| 30.05.2024 | EU 2024/1502 | CTPP designation criteria |
| 30.05.2024 | EU 2024/1505 | CTPP oversight fees |
| 29.11.2024 | ITS 2024/2956 | Information register templates |
| 22.12.2024 | ITS 2024/2956 | Entry into force of register templates |
| 13.02.2025 | RTS 2025/295 | Harmonisation of oversight activities |
| 20.02.2025 | RTS 2025/301 | Incident reporting content & deadlines |
| 20.02.2025 | ITS 2025/302 | Incident reporting templates |
| 24.03.2025 | RTS 2025/532 | Subcontracting (adoption) |
| 17.04.2025 | RTS 2025/532 | Subcontracting (OJ publication) |
| 22.07.2025 | RTS 2025/532 | Subcontracting (entry into force) |
| 08.07.2025 | RTS 2025/1190 | TLPT (entry into force) |
| 2025 | RTS 2025/420 | JET composition |
Key Deadlines
| Deadline | Obligation | Who |
|---|---|---|
| 17.01.2025 | DORA enforcement, reporting active | All financial entities |
| 30.04.2025 | First-time submission of information register to BaFin | All DORA-obligated financial entities |
| 2026 | First supervisory inspections of CTPPs by ESAs | 19 designated CTPPs |
| 01.01.2027 | FinmadiG extension, BAIT replacement | Additional KWG institutions |
| Before 17.01.2028 | First TLPT execution obligation | Systemically important financial entities |
Level 3 – Guidelines
| Date | Guideline | Topic |
|---|---|---|
| 05.06.2024 | JC/GL/2024/34 | Costs & losses from ICT incidents |
| 17.07.2024 | JC/GL/2024/36 | ESA cooperation in oversight |
BaFin-Specific Dates
BaFin offers annual workshops to prepare for the information register submission. The next submission period for 2026 is expected to take place in Q2 2026.
Replacement of xAIT Circulars
- KAIT, VAIT, ZAIT: Repealed since 16.01.2025
- BAIT Chapter 11: Repealed since 17.01.2025
- BAIT complete: Repeal on 31.12.2026
Institutions falling under DORA have been exempt from BAIT since 17.01.2025.