Regulatory Alerts2025-07-11
Final Report on the revised Guidelines on outsourcing to cloud service providers
ESMA has issued a final report amending its 2021 Guidelines on outsourcing to cloud service providers to align with the Digital Operational Resilience Act (DORA). The revision narrows the scope of the guidelines to exclude financial entities covered by DORA, retaining applicability only for specific depositaries under the AIFMD and UCITS Directive that are not subject to DORA. This adjustment prevents regulatory duplication while ensuring continued oversight of cloud outsourcing risks for the remaining targeted entities.
Share