On Jan. 16, MLT FSA issued a circular re DORA reporting timelines.
MLT FSA issued a circular in relation to Reg 2022/2554 on digital operational resilience for financial sector – register of information reporting timelines for authorized persons.
Once DORA becomes applicable on Jan. 17, 2025, financial entities shall maintain a register of information (RoI) with information on all arrangements with ICT third-party service providers (ICT TPPs) and upon request, make the full RoI available.
Or specific sections, along with any info deemed necessary to the competent authority.
In Dec. 2024 ESAs issued a statement with expectation on entities falling under DORA to prepare new reporting obligations with specific reference to RoI, see #236184.
Action to Take
In 2025, authorized persons shall submit RoI to MLT FSA between Apr. 1, 2025 and Apr. 8, 2025 (both days included), which applies up until and including Mar. 31, 2025.
Any person authorized after Mar. 31, 2025 will not be included in 2025 RoI reporting run but will still be required to maintain RoI and make it available upon request.
Failure to submit the full RoI from Apr. 1, 2025 to Apr. 8, 2025 may result in regulatory action by MLT FSA by virtue of the DORA Regulation, LN 166 of 2024 and MFSA Act.
With regards to the reporting procedure, the EBA has released the final technical package for its reporting framework 4.0 on Dec. 19, 2024, see #230883.
MLT FSA will be providing further details re completion and submission of RoI for 2025.
