Glossary
DORA
Digital Operational Resilience Act — EU Regulation (EU) 2022/2554 on digital operational resilience for the financial sector.
DORA (Digital Operational Resilience Act) is European Regulation 2022/2554, which harmonises cybersecurity and digital resilience requirements for the financial sector. Published on 27 December 2022 and in force since 16 January 2023, it has been fully applicable since 17 January 2025 in all Member States.
Unlike a directive, DORA is a regulation: it applies directly, with no national transposition law. It acts as lex specialis for the financial sector, meaning it takes precedence over the NIS2 directive for the entities it covers.