Tech Law Talks

Navigating the Digital Operational Resilience Act

Tech Law Talks

Show Notes

Catherine Castaldo, Christian Leuthner and Asélle Ibraimova break down DORA, the Digital Operational Resilience Act, which is new legislation that aims to enhance the cybersecurity and resilience of the financial sector in the European Union. DORA sets out common standards and requirements for these entities so they can identify, prevent, mitigate and respond to cyber threats and incidents as well as ensure business continuity and operational resilience. The team discusses the implications of DORA and offers insights on applicability, obligations and potential liability for noncompliance.

This episode was recorded on 17 January 2025.

More from Tech Law Talks

Oct 14, 2026

Effective AI governance starts with effective data governance. Anthony Diana, Therese Craparo, Kiriaki Tourikis, and Kristen Pologruto explore how organizations can strengthen the data foundation behind AI to improve results, manage risk, and build more defensible AI programs.

Sep 30, 2026

As AI becomes embedded across the enterprise, legal and compliance teams face new questions around discoverability, preservation, privilege, and the defensible use of AI in document review. Anthony Diana, Therese Craparo, and Michael Rubayo join Robert Cruz of Smarsh to discuss lessons from existing e-discovery practices and practical considerations for managing AI-generated information and emerging litigation risks.

Sep 23, 2026

The EU’s Digital Markets Act and Digital Services Act are reshaping how technology companies operate, compete, and manage online services. In this episode, Reed Smith attorneys Natasha Tardif and Léonie Dhellemmes break down the latest enforcement actions, multimillion-euro fines, and key compliance considerations for businesses navigating Europe’s rapidly evolving digital regulatory framework.

Sep 16, 2026

As AI transforms communications monitoring and supervision, businesses face growing pressure to demonstrate that their compliance programs are effective, defensible, and well governed. In this episode of “Tech Law Talks,” Smarsh’s VP of Regulatory and Information Governance, Robert Cruz, joins Reed Smith lawyers Anthony Diana, Therese Craparo, and Michael Rubayo to explore evolving regulatory expectations, the shift from lexicons to AI-powered surveillance, and the ways that organizations can manage risk at a time when autonomous AI agents are becoming part of the compliance landscape.

Sep 2, 2026

As the use of artificial intelligence accelerates across financial services and other regulated industries, businesses are facing difficult questions about when AI outputs, chatbot exchanges, and agent activity become records that must be retained. In this episode of “Tech Law Talks," Smarsh’s Robert Cruz joins Reed Smith lawyers Anthony Diana, Therese Craparo, and Michael Rubayo as they discuss emerging regulatory expectations, governance strategies, third-party risk, and the growing compliance challenges posed by agentic AI.

See all episodes →