Skip to main content
DORA Auditor

Oversight Fee

Last updated: 1 authoritative sourceDORA Auditor Editorial Team

An oversight fee is the charge a Lead Overseer levies on a designated critical ICT third-party provider under DORA Article 43 to cover the cost of overseeing it, including the Joint Examination Team's work and any independent expert advice. A delegated regulation sets a minimum annual fee of EUR 50,000 per provider.

Detailed explanation

Unlike the periodic penalty payments the Lead Overseer can impose for non-compliance, the oversight fee is not a sanction: it is how the EU-level Oversight Framework funds itself, charged to every provider the framework actually supervises rather than to financial entities or taxpayers. Commission Delegated Regulation (EU) 2024/1505 sets the methodology, which scales the fee to the provider's turnover and the extent of its services to the EU financial sector, with no provider paying less than EUR 50,000 a year regardless of size. For a provider newly designated as critical, the first year is billed as a fixed fee covering the designation and initial oversight set-up costs, replacing the ordinary annual fee for that year. For financial entities, the fee itself creates no direct obligation, but it is a visible marker of how seriously the framework treats a dependency: a provider paying an oversight fee has already cleared the Article 31 designation criteria and sits under direct, funded EU supervision, which is one of the few places in DORA where the regulation reaches past the financial entity to the ICT provider itself.

In context

This term relates to the ICT Third-Party Risk pillar and is grounded in DORA Article 31.

Related terms

Sources

  1. DORA Article 43, EUR-Lex