DORA: Reporting DORA registers of information in March 2026
Since the entry into force of DORA, financial institutions must keep a register of information on all contractual agreements on the use of ICT services provided by third-party providers (DORA, Article 28 paragraph 3). To start the annual European process for designating critical third-party ICT service providers, financial institutions must report their information registers to DNB in March. See below for more information on this requirement.
Published: 03 February 2026
© iStock
When will the reporting request be available?
The reporting request will be available from 2 March 2026 in MyDNB (via the Reporting Service).
What is the reporting deadline?
You must report the information register by 20 March 2026.
What is the Reporting format?
You must report the information register as an xBRL-CSV file with a table-oriented layout for the data.
The European supervisory authorities (ESAs) have provided a website with a set of resources to prepare for the reporting of DORA registers of information, including the applicable validation rules and a visual representation of the data model. The validation rules are also integrated into the EBA's reporting framework.
To support financial institutions, we are also facilitating an alternative delivery method. Financial institutions wishing to make use of this method must report the information register using a standardised Excel template. The template will also be made available in MyDNB via the Reporting Service. We will then convert the Excel template to the xBRL-CSV standard. Responsibility for the accuracy and completeness of the reported information remains with the financial institutions themselves at all times.
Are there changes to the xBRL-CSV taxonomy or the Excel-template compared to 2025?
No, the taxonomy and Excel-template are exactly the same as last year. It is, of course, relevant to ensure the data in the register itself is up to date in line with the reference date.
What is the reference date?
The reference date is 31 December 2025.
What happens after 20 March 2026?
Technical and validation checks will be performed using the validation rules. We will inform you of the results and, where necessary, ask you to rectify any identified errors by resubmitting your report.
Level of consolidation
The consolidation level at which the information register is requested depends on the prudential consolidation of the financial institution, our supervisory mandate (in Dutch) and the relevant Decision of the ESAs.
- Financial institutions for which DNB is the competent supervisory authority, and which are not part of a group of financial institutions, must report the information register at the individual institution level.
- Financial institutions for which DNB is the competent supervisory authority, and which are part of a group of financial institutions, where the parent company is an entity outside the European Union and there is no parent company in the EU, must also report the information register at the individual institution level.
- Financial institutions for which DNB is the competent supervisory authority, and which are part of a group of financial institutions where DNB also supervises at the consolidated level, must report the information register at the highest level of consolidation in the European Union. If the parent company of a financial institution is under the supervision of another European financial supervisory authority, the information register must be reported to that supervisory authority at the highest level of consolidation within the European Union.
We will use this designation when opening up reporting requirements. Consolidated reporting of the information register reduces the reporting burden on financial institutions. A further explanation including detailed examples is included in Frequently asked questions no. 5.
Banks under the direct supervision of the ECB must report the information register at a consolidated level to the ECB.
More information
We regularly communicate relevant developments related to DORA. More information on DORA can be found at www.dnb.nl/DORA.
Discover related articles
DNB uses cookies
We use cookies to optimise the user-friendliness of our website.
Read more about the cookies we use and the data they collect in our cookie notice.