EU-DORA-36-04 Requirement 36 — Exercise of the powers of the Lead Overseer outside the Union

Obtain critical ICT provider consent for third-country inspection

Description

Lead Overseer must obtain consent from the critical ICT third-party service provider concerned before conducting an inspection in a third-country.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Exercise oversight powers in third countries when Union-based oversight insufficient

Ensure inspection necessity for third-country oversight

Verify direct relation to Union ICT services provision

Provide consent for third-country inspections

Officially notify third-country authority before inspection

Conclude administrative cooperation arrangements with third countries

Include coordination procedures in cooperation arrangements

Establish information transmission mechanisms in cooperation arrangements

Include infringement notification mechanisms in cooperation arrangements

Establish regular regulatory update transmission in cooperation arrangements

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started