On 13 April 2026, the Dutch Central Bank (De Nederlandsche Bank, DNB) published a press release announcing changes to the reporting obligations for major ICT-related incidents under DORA. Starting in mid-April, reports submitted to DNB will be validated against the technical requirements applicable to the relevant (partial) reports.
Institutions will receive feedback specifying which requirements have not been met. Where the deviations consist solely of warnings, institutions may update the relevant fields in their next report. There is no obligation to resubmit the report. Where a deviation constitutes an error, however, the report will not be processed, and institutions will be asked to resolve the errors and resubmit their report.
The full press release with a reference to the validation requirements is available here (Dutch only).