DORA: TLPT regulatory technical standards enter into force
Tech · Compliance deadlines · Tue, July 8, 2025 · European Union
Commission Delegated Regulation (EU) 2025/1190 (published 18 June 2025) sets criteria for which financial entities must run threat-led penetration testing, plus methodology and tester requirements. Not legal advice.
Every year
| Date | Event | When |
|---|---|---|
| Mon, Jan 16, 2023 | DORA: DORA enters into force | 4 yr ago |
| Fri, Jan 17, 2025 | DORA: DORA applies | 2 yr ago |
| Wed, Apr 30, 2025 | DORA: First registers of information submitted to the ESAs | 17 mo ago |
| Tue, Jul 8, 2025 | DORA: TLPT regulatory technical standards enter into force | 15 mo ago |
| Tue, Nov 18, 2025 | DORA: First critical ICT third-party providers designated | 10 mo ago |
Source, method and history
- Source
- Regulations
- How we know
- From the Regulations API (regulations.fru.dev), which cites the official text.
- Recurs
- one-off
- More on fru.dev
- regulations.fru.dev
- Feed
- Subscribe to Compliance deadlines
- Changes
- 2026-09-25: added to 2025-07-08