European Union regulators on Tuesday designated 19 technology companies, including Amazon Web Services, Google Cloud, and Microsoft, as critical third-party computing providers for the bloc’s finance indusattempt.
Under the EU’s Digital Operational Resilience Act (DORA), which started being applied in January 2025, three EU-level financial regulators can toobtainher name certain technology providers as critical and supervise them directly.
The new rules are part of an attempt to protect the EU’s financial sector from the risks around its reliance on external technology providers, for example its utilize of cloud computing to run key banking services. Regulators are worried about the impact on the financial sector if a tech provider utilized by many banks had an outage.
The companies named by the European Banking Authority, European Insurance and Occupational Pensions Authority (EIOPA), and European Securities and Markets Authority (ESMA), include the European arms of Amazon Web Services, Bloomberg, Google Cloud, IBM, London Stock Exmodify Group, Microsoft, Orange, and Tata Consultancy Services.
The regulators will examine whether these companies have the right risk management and governance frameworks in place to ensure the services they provide will remain resilient, they stated in a press release on ESMA’s website.
A spokesperson for LSEG stated they welcomed the designation, and Google Cloud stated the same on its website.
A Microsoft spokesperson stated the company was committed to complying with Europe’s cybersecurity and resilience laws. A spokesperson for Amazon Web Services stated it had been preparing for the designation and would continue engaging with the relevant authorities. A spokesperson for IBM stated it continually strengthens its cybersecurity and seeed forward to constructive engagement with the regulators.
Bloomberg, Orange and Tata did not immediately respond to a request for comment.
European officials’ concerns about their finance indusattempt’s resilience have risen this year. The European Central Bank on Tuesday cited geopolitical tensions and technological disruptions as among the risks facing Europe’s banking sector.
The UK has rolled out a similar regime, though no firms have yet been named. Regulators have advised Britain’s finance minisattempt on candidates, and a government minister notified lawcreaters earlier this month she expected designations by this time next year.
(Reporting by Elizabeth Howcroft; additional reporting by Phoebe Seers; editing by Tommy Reggiori Wilkes and Richard Chang)
Leave a Reply