Article 64Entry into force and application

Entry into force and application. The Regulation entered into force on the twentieth day following its publication in the Official Journal and applies from 17 January 2025. A Regulation is directly applicable in all Member States and needs no transposition.

That is the difference from NIS2 in a line. DORA’s obligations do not depend on national transposition laws and have no later national commencement date. A financial entity in Cyprus and one in Ireland are subject to the same text, and were from the same day.

What does vary is enforcement and some options. Chapter VII’s penalties and remedial measures run through each Member State’s own law and each competent authority’s powers, and Article 53 required those national provisions to be notified by the same date the Regulation began to apply. Article 19(1) also lets Member States require extra routing of incident notifications, so the reporting route can differ by country.