2026-01-07

Added

Latvijas Banka Rules No. 409 on Requirements for Digital Operational Resilience for Financial Market Participants Not Subject to Regulation (EU) 2022/2554

Latvijas Banka Rules No. 409 establish ICT risk management and control system requirements for financial market participants excluded from EU DORA, including alternative investment fund managers, insurance entities, micro and small enterprises, credit unions, small private pension funds, and giro settlement institutions. The rules mandate comprehensive ICT security policies, asset classification, continuous risk assessment, physical and logical access controls, and strict operational resilience measures such as backup procedures and business continuity planning. Compliance is required by 15 January 2026, with specific reduced obligations for smaller entities under Articles 12.1, 13, 18.3, 18.4, 26.7, 26.8, and 28.

Financial and Capital Market Commission Latvia logo

Latvia

Financial and Capital Market Commission Latvia

Scan of the document's first page
Share

FCMC published 1 document in the last 30 days — get each new one by email the day it lands.

Read the rest free, and get an email when FCMC publishes again

Lineage: In force

Regulation (EU) 2022/2554 of th…2022Latvijas Banka Rules No. 409on Requirements for Digital O…2026-01-07 · this document
amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: Financial and Capital Market Commission Latvia — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works

More like this from FCMC

FCMC published 1 document in the last 30 days. We email you each new one the day it's published.