In 2025 the CBI paused its domestic collection of Outsourcing Registers while financial entities were preparing for the first collection and submission of registers of information under the Digital Operational Resilience Act (DORA).
The CBI have now announced that it will resume the collection of domestic Outsourcing Registers in 2027. Regulated Financial Service Providers (RFSPs) with a PRISM rating of Medium/Low or above are required to submit their register via the CBI Portal, using the relevant CBI template. The reporting deadline is 28 February 2027 with a data reference point of 31 December 2026. All other RFSPs should complete their registers and be prepared to provide them on request.
To minimise the burden on in scope RFSPs, the CBI have confirmed that:
Companies should use the same template format as previous collections; and
For RFSPs which are also in scope of the DORA Registers of Information (ROI) collection, they may either leave in, or remove data which has already been submitted as part of the DORA ROI submissions. The Central Bank does not have a preference; RFSPs should choose whichever approach minimises their effort. The Central Bank is not seeking to collect DORA ROI information twice.
The Central Bank of Ireland will contact RFSPs within scope of this data collection exercise in Q4 2026 with further details.