On 16 July 2025, the European Central Bank (ECB) published a guide on outsourcing cloud services to cloud service providers.
The publication of the guide follows an earlier public consultation and the ECB has also published a feedback statement which provides an overview of the comments received and the ECB’s assessment of them. The final version of the guide more clearly differentiates the requirements set out in Digital Operational Resilience Act (DORA) from the good practices recommended by the ECB. It also clarifies the way in which the principle of proportionality is applied.