Skip to content

DORA: First critical ICT third-party providers designated

Tech · Compliance deadlines · Tue, November 18, 2025 · European Union

Source

The ESAs published the first list of 19 critical ICT third-party providers (including AWS, Google Cloud and Microsoft), which now come under direct EU oversight. Not legal advice.

Every year

DateEventWhen
Jan 16, 2023DORA: DORA enters into force4 yr ago
Jan 17, 2025DORA: DORA applies2 yr ago
Apr 30, 2025DORA: First registers of information submitted to the ESAs17 mo ago
Jul 8, 2025DORA: TLPT regulatory technical standards enter into force15 mo ago
Nov 18, 2025DORA: First critical ICT third-party providers designated10 mo ago

Also on Nov 18, 2025

DateEventWhen
Nov 18, 2025Leonids meteor shower peak10 mo ago
Source, method and history
Source
Regulations
How we know
From the Regulations API (regulations.fru.dev), which cites the official text.
Recurs
one-off
More on fru.dev
regulations.fru.dev
Feed
Subscribe to Compliance deadlines
Changes
  • 2026-09-25: added to 2025-11-18

Calendar by email

Sunday mornings: a look ahead at the week’s major dates, only when there are some.

Double opt-in. Unsubscribe any time.