LexLint.ioBeta

Know the law your code answers to.

Law / Liechtenstein

EEA DORA Implementation Act (EWR-DORA-DG), ICT Risk Management and Resilience Testing

Gesetz vom 5. Dezember 2024 zur Durchführung der Verordnung (EU) 2022/2554 (EWR-DORA-Durchführungsgesetz; EWR-DORA-DG) LGBl. 2025 Nr. 121, Art. 2, 9

In force since .

A sector security regimes rule binding private bodies.

Instrument type
an act of a legislature
Obligation class
Security, Governance

As of .

What it requires

  • This binds a financial entity and an ICT third-party service provider within Article 2 of the EEA DORA Implementation Act, subject to the exceptions in Article 2(3) of Regulation (EU) 2022/2554 (reached by declaring that you hold a financial-services license). Regulation (EU) 2022/2554 applies as national law under Article 11 until its incorporation into the EEA Agreement.
  • Meet the ICT risk management requirements of Articles 5 to 14 of Regulation (EU) 2022/2554, or the simplified requirements of Article 16(1) and (2) where they apply (Article 9(2)(a)).
  • Carry out the digital operational resilience tests required by Articles 24 and 25 of Regulation (EU) 2022/2554 (Article 9(2)(a)).
  • Manage ICT third-party risk under Articles 28 and 29 of Regulation (EU) 2022/2554 and include in contracts for ICT services the terms Article 30 requires (Article 9(2)(a)).
  • Provide the FMA with complete and correct information and comply with its orders (Article 9(2)(b) and (c)).

These lines are LexLint's reading of the law's text, as of .

If you get it wrong

Private right of actionNo

Penalty structure

The cap applies to a legal person; a natural person faces a fine of up to CHF 200,000.

Rule
Fixed only
As of
Currency
CHF
Fixed cap
1,000,000

Who enforces it

Enforcement body

The Financial Market Authority (FMA) Liechtenstein, the competent authority under Regulation (EU) 2022/2554.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 2 of the EEA DORA Implementation Act applies the Act to financial entities and ICT third-party service providers, subject to the exceptions in Article 2(3) of Regulation (EU) 2022/2554. Article 11 of the EEA DORA Implementation Act makes Regulation (EU) 2022/2554 national law until its incorporation into the EEA Agreement. Article 4 of the EEA DORA Implementation Act makes the FMA the competent authority for Liechtenstein under Regulation (EU) 2022/2554.

Article 9 of the EEA DORA Implementation Act fines a person who fails to meet the ICT risk management requirements of Articles 5 to 14 of Regulation (EU) 2022/2554. Article 9 of the EEA DORA Implementation Act sets the fine for a legal person at up to CHF 1,000,000.

When LexLint raises it

When your app profile says your app provides financial services.

Back to the example  ·  Lint your app