ESMA - Final Report on the revised Guidelines on outsourcing to cloud service providers
ESMA published the Final Report contains a revised version of the Guidelines on outsourcing to cloud service providers, which were published by ESMA in 20201 and applicable starting from 2021.
On 17 January 2025 the digital operational resilience act (Regulation (EU) 2022/2554,DORA) became applicable and ESMA intends to amend the scope of the addressees of the 2021 Guidelines to exclude financial entities covered by DORA. ESMA considers however that guidelines on outsourcing to cloud service providers should be kept for depositaries referred to in Articles 21(3)(c) and 21(3), third subparagraph of AIFMD and Article 23(2)(c) of UCITSD that are not subject to DORA in consideration of their market relevance, of their role as depositaries and of the funds served
