EU Regulators Advance Third-Party ICT Oversight Under DORA and Reiterate Crypto Warnings

Wait 5 sec.

EU Supervisory Authorities highlight cyber resilience, crypto risks andregulatory simplification in 2025 annual report. The report has indirectrelevance for retail trading and CFD markets through its focus on consumerprotection, crypto-asset risks and PRIIPs rules.SingaporeSummit: Meet the largest APAC brokers you know (and those you still don't!).It does not introduce new CFD or leveraged trading measures, butcontinues emphasis on disclosure standards, fraud prevention and supervisoryconvergence across EU retail markets.EUSupervisors Expand Cyber and DORAThe Joint Committee of the European Supervisory Authorities said itmaintained a central coordinating role in 2025 with the European Commission andthe European Systemic Risk Board. Chaired by EIOPA, it focused on EU-widesupervisory coordination.The report covered consumer protection, financial stability andsupervisory cooperation. It said 2025 was shaped by geopolitical uncertainty,faster digitalisation and financial innovation. The ESAs said they aimed tokeep “regulatory frameworks robust, proportionate, and forward-looking”.A key focus was the Digital Operational Resilience Act. The ESAs saidthey delivered all required legal instruments and issued guidance ahead of the17 January 2025 application date. They also designated 19 critical third-partyICT providers between April and November 2025, with the European BankingAuthority acting as lead overseer.EUSupervisors Launch CITE and ReviewNew cyber coordination tools were introduced, including the CyberIncident Information Sharing and Threat Intelligence Exchange. The ESAs saidthese measures “constitute a comprehensive and coordinated effort to bolsterthe EU’s resilience to ICT-related risks”.The Digital Operational Resilience Act (DORA) requires verification for everything running in your infrastructure. Here's how supported open source and reliable security maintenance help you meet this requirement.Learn more: https://t.co/62Fbv7YEtf#DORA #Compliance pic.twitter.com/c6GXXZ00VG— Canonical (@Canonical) January 28, 2026On regulation, the committee supported EU efforts to simplify financialrules, including PRIIPs Key Information Document work and SFDR reportingadjustments, including deprioritising one annual report. It said simplificationmust not weaken financial stability or consumer protection.ESAsHighlight Risks Across Financial SystemIn its risk assessment, the ESAs said geopolitical tensions, traderestrictions and global conflicts increased uncertainty and market volatility.They warned institutions should remain vigilant, saying “strengthening riskmanagement practices, enhancing resilience to cyber threats, and ensuringpreparedness for market shocks are essential”.The report also flagged risks from cyber threats, ICT third-partyconcentration, digital assets and non-bank finance. Crypto risks werehighlighted, with warnings on limited legal protection depending on asset type.Consumer protection remained a priority. The ESAs updated PRIIPs guidanceand reported 12 administrative sanctions across Belgium, Denmark, Hungary andPoland. They also issued warnings on crypto fraud and AI-driven scams.Other initiatives included ESAP development, AMLA cooperation, BigTechmonitoring, securitisation review and a supervisory data exchange system. The ESAs said geopolitical risks, cyber threats and structural marketshifts remain key financial stability concerns.This article was written by Tareq Sikder at www.financemagnates.com.