Regulatory Alerts2024-12-16
Added · Updated
Commission Delegated Regulation (EU) 2025/420 on joint examination teams for critical ICT third-party service providers
The European Commission adopts regulatory technical standards specifying the criteria for determining the composition, designation, tasks, and working arrangements of joint examination teams overseeing critical ICT third-party service providers. The Lead Overseer must establish these teams in agreement with the Joint Oversight Network, ensuring balanced participation from the European Supervisory Authorities and relevant competent authorities based on technical expertise and risk profiles. Members perform specific oversight tasks under the Lead Overseer's coordination, including inspections and assessments, while remaining employees of their nominating authorities subject to their existing employment contracts. The regulation mandates arrangements for cost reimbursement, confidentiality, and conflict of interest checks, entering into force on the twentieth day following its publication in the Official Journal.