European banks and financial institutions must prepare now for stringent new rules on third-party suppliers. Aย consultationย on plans to introduce a regime similar to the EUโsย Digital Operational Resilience Actย (DORA), but focusing on critical non-ICT third-party suppliers, closed in October, and guidelines will follow shortly.
Experts at global law firm Travers Smith wrote in a legal briefing in November that the plans build significantly on the European Banking Authorityโs (EBAโs) existing rules from 2019 and โwill lead to an overhaul of third-party risk management with EU financial services.โ

