PPodcast

Business Continuity under DORA | ALLES LEGAL #104

0
Shares
0
0
0
0
0
0

🎧 What happens when your cloud provider fails or a cyberattack takes down your systems? This episode is all about Business Continuity Management (BCM) – and why it’s a critical regulatory requirement for banks and fintechs under DORA. Tune in now!

Podcast: https://paymentandbanking.podigee.io/727-diese-nderung-betrifft-alle-it-abteilungen-in-banken-und-fintechs/

Business Continuity under DORA: A Must, Not a Nice-to-Have

In episode 104 of Alles Legal – Fintech-Recht kompakt, moderator Dana Wondra from Payment & Banking and Josefine Spengler, lawyer at Annerton, discuss the regulatory and operational requirements for Business Continuity Management (BCM) under the Digital Operational Resilience Act (DORA).

Josefine shares practical insights into common weaknesses and offers guidance on how financial institutions can establish and maintain effective emergency management strategies.

Key points include:

  • Leadership responsibility and governance
  • Recovery planning and realistic testing
  • Contractual inclusion of third-party providers, including exit plans
  • Integration of BCM into ICT risk management

DORA is clear: Business continuity is no longer just an IT issue, but a strategic imperative – even beyond corporate boundaries.

Annerton DORA Monitor Adjust processes, review systems, document evidence: DORA’s requirements are diverse, and implementation calls for clarity and structure.

The Annerton DORA Monitor supports you on your journey to digital resilience: We summarise developments and practical tips for you in a concise format.

📥 Download the first edition free of charge now. – And sign up for our mailing list to be automatically notified by email whenever a new edition is released – ensuring you are reliably guided through the DORA jungle.

About this podcast

Alles Legal – Fintech Recht Kompakt delivers sharp, weekly insights into legal and compliance matters in the world of banking. (in German only)
This podcast is a collaboration between Payment & Banking and PayTechLaw.
Each Wednesday, we unpack the legal developments shaping the financial world – clearly, concisely, and without the legal jargon.
Since 2021, PayTechLaw authors and Annerton attorneys have brought depth and clarity to complex topics.
Whether it’s PSD3, DORA, or FiDA – we provide the legal context you need.
In 20 minutes. No detours.

0
0

Josefine Spengler is a lawyer and IT law specialist at Annerton's Berlin office. She has many years of in-house experience as Head of Legal and Data Protection Officer at a payment service provider. As an expert in the IT and FinTech segment, Josefine Spengler advises national and international clients on all issues at the interface between regulatory law and IT law as well as on compliance and AML issues. Josefine Spengler is a regular speaker at events on IT law and regulatory requirements for the IT of financial companies.



By continuing, you accept our privacy policy.
You May Also Like
FFinTech
PFOF-Verbot
Read More
  • 5 minute read

The PFOF ban comes into force: What the new BaFin supervisory statement means for brokers and neobrokers

Since 1 July 2026, the ban on Payment for Order Flow (“PFOF”) has also been in force for purely domestic business relationships in Germany. On 22 July 2026, BaFin published a supervisory statement on this matter, in which it sets out in concrete terms for the first time which business models it considers to be compliant with the rules - and which are not.
Read More
RRegulatory
FIU-Jahresbericht 2025 – Wesentliche Entwicklungen im Überblick FIU Annual Report 2025 – Key Developments at a Glance
Read More
  • 6 minute read

FIU Annual Report 2025 – Key Developments at a Glance

Germany's FIU recorded a historic number of suspicious activity reports in 2025, while the number of analytical reports declined significantly. Alongside new regulatory requirements and a stronger international focus, neobanks have emerged as a key pillar of reporting activity. This article analyses the most important developments and highlights the questions that remain unanswered in the annual report.
Read More
BBanking
EuGH schafft Klarheit: Nicht jede Weiterleitung von Geldern Dritter ist ein Zahlungsdienst im Sinne der PSD2 ECJ Clarifies the Scope of PSD2: Not Every Transfer of Third-Party Funds Constitutes a Payment Service
Read More
  • 3 minute read

ECJ Clarifies the Scope of PSD2: Not Every Transfer of Third-Party Funds Constitutes a Payment Service

The ECJ has further clarified the distinction between payment services and other business models. The judgment confirms that merely receiving and forwarding third-party funds does not automatically trigger licensing requirements under PSD2. The decision provides greater legal certainty for FinTechs, platform operators and other businesses handling payment flows, while emphasising that the specific business model remains decisive.
Read More