EU financial firms face DORA penalties as enforcement begins
The enforcement era of the Digital Operational Resilience Act (DORA) has started after the European Supervisory Authorities published the first incident overview on 3 June 2026. National authorities are now cross-checking ICT risk management data and issuing penalties, with fines ranging up to 20 million euros or 10% of