meta_id 2979465

On March 17, 2026, the Commission de Surveillance du Secteur Financier (CSSF), Luxembourg's financial regulator, issued an update regarding the submission of information registers required under the Digital Operational Resilience Act (DORA). Financial entities subject to DORA must submit their register of information to the CSSF by March 31, 2026, at individual or consolidated level. Third-country branches of credit institutions face an extended deadline of June 30, 2026, on a best effort basis. As of March 16, 2026, only 40 percent of required financial entities had submitted their registers, prompting the CSSF to urge immediate submission to address potential issues promptly. The CSSF will forward submitted registers to the European Supervisory Authorities (ESAs) for additional quality control checks throughout April 2026. Should the ESAs detect errors and refuse a register, the submitting entity will be notified by the CSSF and must correct and resubmit the register before the end of April. The CSSF advises financial entities to maintain adequate resources throughout April to support the validation process with the ESAs. This update applies to investment firms, credit institutions, electronic money institutions, payment institutions, investment fund managers, data communication service providers, and crypto-asset service providers operating in Luxembourg. **Reference:** Commission de Surveillance du Secteur Financier (CSSF). "DORA – Collecte du registre d'information – Mise à jour." March 17, 2026. Available at: https://www.cssf.lu/