BBLOCKBRIEFING
Crypto Business

EU Reviews MiCA Crypto Rules and DORA Cybersecurity Burdens

Editorial note: This report is for information, not investment advice. Market conditions can change. We identify primary sources and distinguish observations from predictions. Full disclaimer.

The European Commission is reviewing how its two major digital-finance rulebooks are working in practice, using an October 27 implementation dialogue to examine potential simplification of the Markets in Crypto-Assets Regulation (MiCA) and the Digital Operational Resilience Act (DORA). The meeting is designed to gather industry experience, not to approve an immediate rewrite of either framework.

The Commission’s event notice says financial-services commissioner Maria Luís Albuquerque is hosting the invitation-only dialogue in Brussels on October 27, from 14:30 to 17:30 Central European Time.

MiCA compliance is on the agenda

One session focuses on whether MiCA’s implementation is meeting policy objectives while avoiding unnecessary administrative work. The regulation sets requirements for cryptoasset service providers and certain token issuers operating in the European Union.

Participants are invited to identify where the rules may be simplified or compliance costs reduced. The Commission did not publish a proposed amendment or announce that any existing cryptoasset licensing duties have been suspended.

DORA proportionality comes under review

The second session concerns DORA, the EU framework for operational resilience and technology risk across financial institutions. The Commission specifically wants feedback on whether requirements are proportionate to organizations’ size, risk profile and operational complexity.

For crypto businesses subject to both sets of rules, the practical challenges can include staff capacity, security monitoring, third-party technology oversight and documentation. That does not mean cybersecurity obligations have become optional: the dialogue is assessing implementation and possible future improvements.

Why the two rulebooks matter together

MiCA addresses cryptoasset operations and market-facing conduct; DORA focuses on institutions’ ability to withstand and manage ICT disruptions. Providers often need to meet both kinds of obligations even when they serve small or specialized client bases.

The debate reflects a recurring policy trade-off. More consistent rules may increase confidence in the market, but complex implementation can place a heavier burden on smaller businesses. Evidence from participants will be needed to determine whether particular provisions are redundant or disproportionate.

What happens after the dialogue

The Commission says it will publish a summary of conclusions and a list of participating organizations after the event. Until that material is released, any claim that EU lawmakers have agreed to soften MiCA or DORA would be premature.

BlockBriefing recently covered France’s proposals for DeFi safeguards in a MiCA review. Those are separate national proposals and should not be mistaken for a Commission decision on October 27.

Primary source: European Commission event agenda, October 27, 2026. The outcome remains pending at the time of this report.

Follow this topic Share on LinkedIn Share on X Upcoming market events

Sources, corrections and methodology

Article source links appear in the report above. We aim to distinguish independently verifiable facts, attributed claims, and analysis. If you find an error, please share the article URL and supporting documents.

Corrections policy · Editorial standards