Source: OJ L, 2024/1505, 30.5.2024

Current language: EN

Article 5 Payment of the oversight fees


Summary What does Article 5 of the Oversight fees say?

This article sets out the practical payment mechanics for the oversight fees established elsewhere in the regulation.

It covers how, when, and in what currency critical ICT third-party service providers must pay their annual fees to the Lead Overseer, and introduces consequences for late payment.

It connects directly to Articles 3 and 4, which determine how those fees are calculated.

Important points:

  • Pay oversight fees to the Lead Overseer annually, in euro, as a single instalment — by 30 April if already subject to oversight at the start of the year, or by 31 December if designated during the year.
  • Payment terms on debit notes must be at least 30 days.
  • Late payments will incur default interest as set out in Article 99 of Regulation (EU, Euratom) 2018/1046.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Critical ICT third-party service providers shall pay the oversight fees referred to in Article 43 of Regulation (EU) 2022/2554 to the Lead Overseer on an annual basis.

    1. All oversight fees shall be invoiced and paid in euro. Debit notes for oversight fees shall set payment terms of at least 30 days.

    1. All oversight fees shall be paid based on a single instalment basis. Critical ICT third-party service providers which will be subject to oversight activities on 1 January of a given year shall pay the debit note by 30 April of that year. Critical ICT third-party service providers designated throughout the year shall pay the fees referred to in Article 4 in a single instalment by 31 December of that year.

    1. Any late payment shall incur the default interest laid down in Article 99 of Regulation (EU, Euratom) 2018/1046.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod