Regulation (EU) 2022/2554 on Digital Operational Resilience for the Financial Sector – Register of Information Reporting Reminder | Year 2026

Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Regulation (EU) 2022/2554 on Digital Operational Resilience for the Financial Sector – Register of Information Reporting Reminder | Year 2026 This Circular applies only to Financial Entities within the scope of the DORA Regulation This Circular links to, and is an update of, circular titled Regulation (EU) 2022/2554 on Digital Operational Resilience for the Financial Sector – Register of Information Reporting Timelines for the Year 2026 and Onwards published by the Authority on 3 November 2025. The Authority would like to remind the Financial Entities within the scope of the DORA Regulation of their obligation to submit their Register of Information (RoI) within the Reporting Period, which is between 01 January 2026 and 21 March 2026, using the date of 31 December 2025 as the Reference Date. Failure to submit an Accepted and DORA compliant RoI within the specified Reporting Period may result in regulatory action by the Authority by virtue of L.N. 166 of 2024 and the MFSA Act. For detailed guidance on submitting the RoI, please refer to the User Guide, which outlines a clear step-by-step process for the successful upload of the RoI via the LH Portal. Credit Institutions classified as significant, in accordance with Article 6(4) of Regulation (EU) No 1024/2013 and which are directly supervised by the European Central Bank (‘ECB’), are to be guided by the ECB regarding the submission of their RoI. For any issues encountered with the RoI submission, Authorised Persons are kindly required to reach out to the Supervisory ICT Risk and Cybersecurity (‘SIRC’) function at roi@mfsa.mt. 28 January 2026