Recital 69
Digital Operational Resilience Act · UE 2022/2554
| (69) | When renegotiating contractual arrangements to seek alignment with the requirements of this Regulation, financial entities and ICT third-party service providers should ensure the coverage of the key contractual provisions as provided for in this Regulation. |
In Luxembourg, the CSSF issued Circular CSSF 22/806 on outsourcing arrangements, which predates DORA but remains fully applicable and serves as the reading framework for CSSF inspectors on ICT contracts. When renegotiating under recital 69, Luxembourg financial entities must therefore align their contracts both with Article 30 of DORA and with the specific expectations of Circular 22/806 (prior notification to the CSSF for critical outsourcing, outsourcing register, internal governance).
Luxgap practice: we configure the Contract Gap Analyzer with a dual DORA + CSSF Circular 22/806 framework, producing a single matrix that satisfies both regimes simultaneously and avoids duplicated documentation effort.
