BelgiumLaw of 25 March 2025 on the digital operational resilience of the financial sector (DORA implementation), Competent Authorities
In force since .
A sector security regimes rule binding government bodies.
- Private right of action
- No
- Obligation class
- Security, Governance
As of .
What it requires
- Take on, as the Financial Services and Markets Authority (FSMA), the tasks DORA Article 46 gives the competent authority for the entities Article 37undecies lists, and supervise their compliance with Regulation (EU) 2022/2554 and the provisions adopted under it.
- Act, as the National Bank of Belgium, as the relevant competent authority designated under DORA Articles 19(1) and 32(5), and forward to the national CSIRT without delay the notifications and reports under DORA Article 19(4) that you receive from entities covered by the NIS2 law of .
These lines are LexLint's reading of the law's text, as of . Also read by: National Bank of Belgium (NBB), Circular NBB_2026_04 of (guidance, recorded ).
Who enforces it
Enforcement body
Financial Services and Markets Authority (FSMA) for the entities Article 37undecies lists; National Bank of Belgium as the relevant competent authority under DORA Articles 19(1) and 32(5).
Settledness
- As of
- Guidance link
- https://www.nbb.be/doc/cp/eng/2026/20260401_nbb_2026_04.pdf
- Guidance body
- National Bank of Belgium (NBB), Circular NBB_2026_04 of
What this law does
The Law of on the digital operational resilience of the financial sector and containing miscellaneous provisions (Chamber bill 56 0569) gives effect in Belgium to Regulation (EU) 2022/2554 (DORA) and partly transposes Directive (EU) 2022/2556. The Chamber's record gives as the date of the Law and as its publication in the Moniteur belge.
New Article 37undecies of the Law of makes the Financial Services and Markets Authority (FSMA) the competent authority under DORA Article 46 for portfolio-management and investment-advice companies, trading venues and their operators, alternative investment fund managers it has approved, UCITS management companies and self-managed investment companies, insurance intermediaries, occupational pension institutions and crowdfunding service providers.
Article 5 of the Law makes the National Bank of Belgium the relevant competent authority designated under DORA Articles 19(1) and 32(5). Article 5 also requires the Bank to forward to the national CSIRT, without delay, the notifications and reports under DORA Article 19(4) that it receives from entities covered by the NIS2 law of . The Law extends the existing supervision and sanction regimes of the Bank and the FSMA to infringements of Regulation (EU) 2022/2554.
The adopted text contains no commencement article, so the general rule applies and the Law took effect on the tenth day after publication, .
When LexLint raises it
When your app profile says your app is an insurer or is a securities firm.