Regulatory Alerts2025-04-09
Added · Updated
Circular CSSF 25/883 amending Circular CSSF 22/806 on outsourcing arrangements
Circular CSSF 22/806 is amended to align with the Digital Operational Resilience Act (DORA), which applies to CSSF-supervised financial entities as of 17 January 2025. For these entities, Part II of Circular CSSF 22/806 regarding ICT outsourcing no longer applies, while Part I remains applicable for non-ICT outsourcing. The requirement for specific contractual clauses for cloud computing service providers is repealed to avoid duplication with DORA requirements. Entities not falling under DORA continue to be subject to the full scope of Circular CSSF 22/806.
More like this from CSSF
We email you every new CSSF publication the day it's published.
Topics
Share