DORA has applied since 17 January 2025, with no further grace period after that date. There is no single fixed TLPT deadline — entities identified for TLPT begin the process on notification from their competent authority, then repeat it at least every three years.
DORA is a live obligation with a timeline of milestones rather than one big deadline. Here is how it maps out.
The milestones
14 December 2022 — DORA adopted.
16 January 2023 — entry into force.
17 January 2025 — application date; compliance expected, no further grace period.
11 February 2025 — Irish implementing and enforcement measures (S.I. 20/2025).
8 July 2025 — TLPT Regulatory Technical Standards applicable.
17 January 2028 — DORA begins to apply to Irish credit unions.
How TLPT timing actually works
There is no universal ‘TLPT deadline’. Entities identified for TLPT begin the formal process following notification from the relevant TLPT authority, then repeat the exercise at least every three years, unless the authority adjusts the frequency. Because a TLPT is lengthy (the active red-team phase alone runs at least 12 weeks), identified firms should plan promptly after notification.
Level-2 measures continue to evolve
Various regulatory and implementing technical standards and guidance continue to be finalised. Always check current sources for the latest position.
Want to know which milestones affect your firm? Book a readiness assessment.