On 17 January 2025, the European Securities and Markets Authority (ESMA) issued a statement which provides guidance on how and under which timeline crypto-asset service providers (CASPs) are expected to comply with the requirements of Titles III and IV of the Regulation on markets in crypto-assets (MiCAR). In particular
ESAs report on the feasibility of further centralisation in the reporting of major ICT-related incidents by financial entities
On 17 January 2025, the European Supervisory Authorities (ESAs) issued a report on the feasibility of further centralisation in the reporting of major ICT-related incidents by financial entities according to Article 21 of the Digital Operational Resilience Act (DORA).
Article 21 DORA requires that the ESAs prepare a joint report assessing
DORA now live and new podcast available
DORA is now live, without any transitional provision.
A wide range of rules applicable for managing ICT risks, including risks linked to ICT third-party service providers, applies from today. DORA applies to nearly all financial entities in the EU, with very few exemptions for smaller institutions. For the first time, it also covers major unregulated
DORA implementation – behind the curve?
This Friday (17 January) the EU Digital Operational Resilience Act, DORA, comes into force and, unusual for EU legislation, there are no transitional provisions meaning the legislation comes into effect immediately.
The European Securities and Markets Authority has already warned that financial entities should identify and address gaps between their internal set ups and DORA’s
MiCAR – RTS specifying the detailed content of information necessary to carry out the assessment of a proposed acquisition of a qualifying holding in a crypto-asset service provider
On 18 December 2024, the European Commission adopted a Delegated Regulation supplementing the Regulation on markets in crypto assets with regard to regulatory technical standards specifying the detailed content of information necessary to carry out the assessment of a proposed acquisition of a qualifying holding in a crypto-asset service provider.
The Delegated Regulation enters into
ESA DORA dry run exercise summary report
On 17 December 2024, the European Supervisory Authorities (ESAs) issued a summary report with the key findings from the 2024 dry run exercise on reporting the registers of information (RoI) under the Digital Operational Resilience Act (DORA).
Dry run
The primary objective of the dry run exercise was to
ESMA Feedback Statement on criteria to assess CTP applicants
On 16 December 2024, the European Securities and Markets Authority (ESMA) issued a Feedback Statement regarding the criteria to assess consolidated tape provider (CTP) applicants.
In the Feedback Statement ESMA summarises the input received on its initial reflections on the specification of the assessment criteria for the CTP selection procedures, as
MiCAR – RTS specifying the detailed content of information necessary to carry out the assessment of a proposed acquisition of a qualifying holding in an issuer of an ART
On 18 December 2024, the European Commission adopted Delegated Regulation (EU) supplementing the Regulation in markets in crypto assets with regard to regulatory technical standards (RTS) specifying the detailed content of information necessary to carry out the assessment of a proposed acquisition of a qualifying holding in an issuer of an asset-referenced token.
ESAs Guidelines on templates for explanations and opinions, and the standardised test for the classification of crypto-assets
On 10 December 2024, the European Supervisory Authorities (ESAs) issued a final report containing guidelines on templates for explanations and opinions, and the standardised test for the classification of crypto-assets, under Article 97(1) of the Regulation in markets in crypto-assets (MiCAR).
The guidelines have been developed in accordance with Article 97(1)
ESAs statement on DORA application
On 4 December 2024, the European Supervisory Authorities (ESAs) issued a statement on the application of the Digital Operational Resilience Act (DORA).
The statement notes that DORA and its technical standards and guidelines will apply from 17 January 2025 and financial entities and third-party providers are called on to advance their