Guidance for interpretation and resolution of CSSF error messages related to the submission of the DORA register
Executive Summary
This CSSF guidance document, published on 11 February 2026, provides detailed explanations and resolution steps for error messages encountered during the submission of the DORA Register of Information (RoI) via the eDesk portal, specifically for the 2026 submission cycle. It matters because it enables Luxembourg financial entities to ensure compliant submissions amid enhanced validation checks on more data fields, avoiding re-submission delays and supporting timely transmission to the ESAs by CSSF deadlines. Non-compliance risks supervisory scrutiny under DORA's ICT risk management framework. #
What Changed
- Enhanced validation checks for the 2026 RoI submission: Applies ESA-defined checks (last updated April 2025) to more data fields to improve data quality, compared to prior cycles. - Specific error resolutions detailed, including requirements for LEI code communication to CSSF beforehand, correct reference date ('2025-12-31') in file naming, plain-CSV files in predefined .zip structure, and proper FilingIndicators.csv/parameters.csv content. - Mandatory inclusion of all tables (even empty) in FilingIndicators.csv set to 'true', with matching identification codes across parent-child records. - Builds on prior CSSF guides, emphasizing eDesk role "DORA Reporting" assignment and ESAs' technical standards. No new regulatory requirements under DORA itself; this refines technical submission pro
What You Need To Do
- Assign "DORA Reporting" role in eDesk to dedicated employee(s) per user guide
- Communicate LEI code to CSSF line supervisor prior to first submission to enable upload
- Prepare RoI in plain-CSV files within
- Test submissions against listed error codes (e
- Consult ESAs' EBA resources (data point model, validation rules, FAQs) and CSSF guides (e
- If errors post-CSSF validation, re-submit promptly; prepare for ESA second-round checks
Key Dates
Compliance Impact
Urgency: High - Published today (11 February 2026), this equips firms for imminent 2026 RoI submissions (reference date 31 December 2025), with stricter validations on expanded fields risking rejections/re-submissions. Matters for operational resilience compliance under DORA Article 28, as accurate RoI supports supervisory oversight of ICT third-party risks; delays could trigger CSSF/ESA follow-up
Who is Affected
Summary
Guidance allowing financial entities to identify the National Competent Authority to which their register of information has to be submitted.