meta_id 3201363

On June 1, 2026, Finland's Financial Supervisory Authority (FSA) updated five regulatory guidance documents to align with the Digital Operational Resilience Act (DORA) regulation. The FSA modernised its Rules and Guidelines collection by removing overlapping provisions and updating regulatory references following DORA's application across the European Union on January 17, 2025. The updated guidance documents cover: Operational Risk Management in Financial Sector Supervised Entities (8/2014); Outsourcing in Financial Sector Supervised Entities (1/2012); Life and Non-Life Insurance Company Operations Commencement and Governance Systems (6/2015); Payment Institutions and Persons Providing Payment Services Without Authorisation (8/2016); and Supplementary Pension Institution Governance (1/2019). DORA establishes comprehensive requirements for information and communication technology (ICT) operations across supervised entities. The FSA removed separate ICT-specific guidance provisions that duplicated DORA's requirements, eliminating redundancy in the regulatory framework. The FSA also removed divergent interpretations of DORA provisions from its guidance, as unified interpretations will be provided by European Union supervisory authorities, including the European Banking Authority (EBA), European Insurance and Occupational Pensions Authority (EIOPA), and European Securities and Markets Authority (ESMA). The updated guidance takes effect on June 1, 2026. The FSA received stakeholder feedback during the consultation period, which it summarised in a public response document available on its website alongside the updated guidance. Supervised entities should review the revised guidance to ensure compliance with the new requirements.