IBM designated as a critical third-party provider under EU DORA

European Supervisory Authorities have designated IBM as a critical ICT third-party provider under the Digital Operational Resilience Act (DORA), bringing the company into EU supervision. IBM says the move reinforces its commitments to operational resilience, regulatory compliance and client support across financial services.

On Dec. 5, 2025, IBM announced that the European Supervisory Authorities (EBA, EIOPA, ESMA) have designated the company as a critical ICT third-party provider under the Digital Operational Resilience Act (DORA). The release notes that DORA is a European Union regulation intended to ensure that financial entities such as banks, insurance companies and investment firms – and their critical Information and Communication Technology providers – can withstand and recover from technology disruptions, including cyber incidents and technical failures. The designation acknowledges IBM’s role in supporting the operational resilience of Europe’s financial sector.

The company said the designation places IBM in-scope for supervision by the European Supervisory Authorities and that it will work closely with the ESAs to meet supervisory expectations. IBM (NYSE: IBM) framed the development as a reinforcement of its longstanding support for financial services, and highlighted its global footprint in which it helps clients in more than 175 countries. The statement emphasized that IBM has been preparing across technology and services units for DORA implementation, strengthening cybersecurity technologies, defenses and governance to meet the standards set out by the regulation.

IBM outlined practical implications for customers and regulators, promising continued guidance and resources to help financial institutions meet their DORA obligations while maintaining innovation and competitiveness. The company listed priorities including collaborating with regulators to ensure compliance and transparency, supporting financial institutions in meeting their obligations and investing in resilience to safeguard stability and trust in digital services. The release also referenced IBM’s broader capabilities as a leading global hybrid cloud and Artificial Intelligence and business services provider, and signaled that it looks forward to constructive engagement with the ESAs to help clients navigate evolving regulatory requirements with confidence.

55

Impact Score

Deepfake porn and chatbot privacy breaches

Nonconsensual deepfake pornography is harming not only people whose faces are inserted into explicit media, but also adult creators whose bodies and likenesses are reused without permission. Generative Artificial Intelligence chatbots are also exposing private phone numbers, making personal information easier to retrieve and harder to control.

European Union Artificial Intelligence Act raises layered compliance demands for finance

Banks, insurers and financial intermediaries face a more complex compliance environment as the European Union Artificial Intelligence Act overlays existing financial regulation and the GDPR. Proposed changes in the Digital Omnibus Package may delay some obligations, but the core challenge remains managing overlapping rules, roles and regulators.

Europe and US discuss biometric data-sharing framework

European Union and US officials are negotiating a border security arrangement that could enable continuous biometric data exchanges on EU citizens. The UK says the US has also requested access to fingerprint records as part of Visa Waiver Program discussions.

Apple plans Intel 18A-P for M7 and 14A for A21

Apple is expected to use Intel’s 18A-P process for M7 chips in MacBook models and Intel’s 14A process for A21 chips in iPhones. The shift points to a broader supplier strategy as Apple moves beyond TSMC for parts of its future silicon roadmap.

Contact Us

Got questions? Use the form to contact us.

Contact Form

Clicking next sends a verification code to your email. After verifying, you can enter your message.