In today’s rapidly evolving marketplace, our clients are increasingly concerned with business collaborations, restructuring, mergers and acquisitions, financing and questions of social responsibility. They need legal security when dealing with such complex issues. That is why we work closely with PwC’s tax, human resources and finance experts and draw on the resources of our legal network in more than 100 countries to deliver comprehensive advice. Whether a global player, a public body or a wealthy individual, each client can rely on a personal account manager to address his or her specific legal needs. This dedication helps us ensure our client’s long-term business success.
PwC Legal. More than 220 lawyers at 18 locations. Integrated legal advice for the real world.
As financial institutions operationalise the EU's Digital Operational Resilience Act (DORA), the UK's Critical Third Party regime introduces a parallel framework with distinct differences. Both regimes expand regulatory oversight to encompass the digital infrastructure underpinning modern finance, creating new compliance challenges for internationally active firms and technology providers operating across jurisdictions.
Michael Huertas’s articles from PwC Legal Germany are most popular:
within Finance and Banking topic(s)
EU RegCORE Client Alert | EU Digital Single Market, financial services and crypto-assets
As financial institutions continue to operationalise the EU’s Digital Operational Resilience Act (DORA), attention is increasingly turning to the United Kingdom’s Critical Third Party (CTP) regime, with new CTP designations published 13 July 2026. Although both frameworks seek to strengthen operational resilience by introducing direct oversight of systemically important technology providers, they differ in their legal architecture, supervisory philosophy and implementation.
Those differences matter for firms operating across both jurisdictions. Yet they also reveal something more fundamental. Both regimes reflect a broader shift in financial regulation: the expansion of the reg-ulatory perimeter beyond regulated financial institutions to encompass the digital infrastructure upon which modern finance depends.
For internationally active firms and critical technology providers alike, understanding where the regimes converge - and where they diverge – will become increasingly important.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
