LUX CSSF DORA Information Register

Updated on: May 5, 2025

Latest Event


  • Apr. 30, 2025 Extended Deadline
  • On Apr. 30, 2025, LUX CSSF extended the deadline for DORA information register.
  • eDesk open for financial entities to submit corrected registers until May 31, 2025.

On Apr. 1, LUX CSSF reminded of information register submission date.

  • LUX CSSF informed of submission of DORA information register via the eDesk portal.
  • Follows LUX CSSF Dec. 2024 reminded of ESAs statement, preparedness, #236438.
  • Main Points
  • Details on the submission of the register of information at individual or consolidated level to LUX CSSF, excluding entities under the direct supervision of the ECB.
  • Financial entities subject to DORA must maintain and update a register of information re contractual arrangements on the use of ICT services provided by ICT third-parties.
  • This register must be kept at entity level, sub-consolidated and consolidated levels.
  • To upload the register of information via the eDesk Portal, the role DORA Reporting needs to be assigned by a financial entity to at least one dedicated employee.
  • Then the eDesk procedure Submission of the Register of Information can be selected.
  • The register must be submitted in plain-csv files, enclosed in a .zip-file following a predefined folder structure and file naming convention, as defined by the ESAs.
  • In case errors are detected, the submitting financial entity will be invited to fix them and re-submit its register; in May 2025, the ESAs will perform a 2nd validation check.
  • Effectiveness
  • Entities must submit their register of information to LUX CSSF between Apr. 1, 2025 and Apr. 15, 2025 via eDesk.
  • For 2025 as first year of submission, reference date of the register of information is set to Mar. 31, 2025, i.e., it must include all arrangements contracted until that date.
  • Apr. 2025 Errors Identified and Guidance Updated
  • On Apr. 24, 2025, LUX CSSF reported ESAs' observations on common errors, as well as updated guidance (PDF), and guidance table (PDF) on DORA register submissions.
  • European Supervisory Authorities (ESAs) comprising EBA, EIOPA, and ESMA, compiled document with main common issues identified during User Acceptance Testing phase.
  • LUX CSSF's guidance is not set out to be exhaustive but covers the most common problems that were faced during the validation checks of the registers received.
  • In addition, LUX CSSF advises that the few entities that have not yet submitted their register that they are still required to do so as soon as possible.
  • Guidance by LUX CSSF clarifies when Luxembourg-based financial entities, subject to DORA and supervised by the CSSF or ECB, must submit their information register.
  • Regarding submissions to LUX CSSF on a consolidated or individual basis, or to another competent authority, and entities are advised to consult guidance if in doubt.
  • Apr. 30, 2025 Extended Deadline
  • On Apr. 30, 2025, LUX CSSF extended the deadline for DORA information register.
  • eDesk open for financial entities to submit corrected registers until May 31, 2025.
Regulators
LUX CSSF
Entity Types
B/D; Bank; Depo; Exch; IA; Inv Co; MSB
Reference
PR, 4/30/2025; Gd V1.0, Info, PR, 4/24/2025; PR, 4/1/2025; DORA Dir 2022/2556, Reg 2022/2554
Functions
BCS; Compliance; Cyber; Financial; HR; Legal; Operations; Outsourcing; Privacy; Record Retention; Reporting; Risk; Technology
Countries
Luxembourg
Category
State
N/A
Products
Banking; Cards; Cryptocurrency; Equity; Fixed Income; Fund Mgt; Payments; Securities
Rule Type
Final
Regions
EMEA
Rule Date
Apr 1, 2025
Effective Date
May 31, 2025
Rule ID
249374
Linked to
Reg. Last Update
Apr 30, 2025
Report Section
EU