Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

Article 53Notification duties

Member States shall notify the laws, regulations and administrative provisions implementing this Chapter, including any relevant criminal law provisions, to the Commission, ESMA, the EBA and EIOPA by 17 January 2025. Member States shall notify the Commission, ESMA, the EBA and EIOPA without undue delay of any subsequent amendments thereto.

DORA, the European Union regulation on digital operational resilience, Article 53

Member States must notify the laws, regulations and administrative provisions implementing Chapter VII, including any relevant criminal law provisions, to the Commission, ESMA, the EBA and EIOPA by 17 January 2025, and must notify any later amendments without undue delay. The first date has passed; the duty to notify amendments continues.

Chapter VII’s penalties and remedial measures operate through national law (Articles 50 to 52), and this article is how the Commission and the ESAs are told what each Member State has adopted. The article does not say that the notified instruments are published. It is the national rules themselves, not the notification, that set what a breach costs in each Member State.

Text: Regulation (EU) 2022/2554, as published in the Official Journal of the European Union, from EUR-Lex. Only the Official Journal text is authentic.