Data storage, processing, and entry rule issues
Fix mandatory fields, country entries, subcontractor rows, alternative provider entries, and direct document links in DORA register records.
What this issue group covers
This page covers fields that become required after a Yes answer, country fields that still fail after you filled them in, and entries that need extra rows because more than one valid Data storage country, Data processing country, or subcontractor applies.
It also covers document-link issues. Those are different from repeated-row issues. The problem there is usually the link itself, not how the row is set up.
Issues covered on this page
This field became mandatory
What this usually means
A Yes answer in the same row turned another field into a required field. The field is not failing on its own. The row now needs the matching dependent value.
What to check and how to fix it
Check the Yes/No field in the same row that controls the dependency.
If that answer should not be Yes, correct it first. If it should stay Yes, complete the dependent field in that same row before checking anything else.
Check whether the row uses Does provider handle sensitive data?
If it does, review Data storage country for that same row. Where storage applies, enter the correct country. If more than one storage country applies, add one row for each country.
Check whether the service is based on or foresees data processing.
If it does, complete Data processing country for that same row. If more than one processing country applies, add one row for each country.
Check that you filled the dependent value in the row that triggered the requirement.
If you entered it in another repeated row, move it or add it to the correct row.
Check the other repeated rows for the same contract and ICT service.
If another row still has the same Yes answer or the same processing setup but the matching country field is missing or wrong, fix that row as well.
Related issues
This field is still being flagged
What this usually means
The field is usually not failing because it is blank. It is failing because the value does not match the rule for that field, the value is in the wrong repeated row, or the field needs Not Applicable instead of a country.
What to check and how to fix it
Check the exact row that is being flagged.
If the same contract or ICT service appears on several repeated rows, make sure you filled the value in the row that is actually failing.
Check whether the flagged field is Data storage country, Data processing country, or one of the ICT service supply chain fields.
Those fields should each hold one value only. If you entered a list, split it into separate rows instead of keeping several values in one field.
Check Data storage country against Does provider handle sensitive data?
If storage does not apply for that row, use Not Applicable instead of leaving the field empty. If storage does apply, enter the correct storage country for that row.
Check Data processing country against whether the service is based on or foresees data processing.
If processing does not apply for that row, use Not Applicable instead of leaving the field empty. If processing does apply, enter the correct processing country for that row.
Check the value format.
Where the field expects a country, enter the country value required for that field rather than free text, notes, or a sentence.
Related issues
My record is failing because I entered more than one value
What this usually means
The register is built around one value per data element. When more than one valid value applies, the fix is usually another row, not a longer entry in the same field.
What to check and how to fix it
Check the failing field for commas, slashes, line breaks, or pasted lists.
If you used any of those to hold several values, split them out.
Check whether the field is Data storage country or Data processing country.
If it is, keep one country per row only.
Check whether the field is in the ICT service supply chain.
If it is, keep one provider code in ID code and one recipient code in Subcontracted ICT service recipient's ID code.
Add a new row for each additional valid value and keep the same contract and ICT service details where those parts do not change.
Check the repeated rows again.
Only the value that genuinely changes should differ between those rows.
Related issues
I do not know whether I need another row
What this usually means
You need another row when more than one valid country applies to Data storage country or Data processing country. Those fields are not meant to hold several countries in one entry.
What to check and how to fix it
Check whether the issue is about Data storage country or Data processing country.
Fix them separately. One can require extra rows without the other doing so.
If more than one storage country applies, add one row for each Data storage country.
If more than one processing country applies, add one row for each Data processing country.
Keep the same contract and ICT service details across those repeated rows unless another field genuinely changes as well.
If storage or processing does not apply to that row, use Not Applicable in the relevant country field instead of adding extra country rows.
Related issues
I do not know how to enter multiple subcontractors
What this usually means
Each subcontractor in the ICT service supply chain needs its own row. The row must show its place in the chain and the provider that receives its subcontracted ICT services.
What to check and how to fix it
Check that each subcontractor has its own row in the ICT service supply chain.
Do not combine several subcontractors in one provider entry.
Check Level of this provider in ICT supply chain.
The direct ICT third-party service provider is always 1. A subcontractor must be entered with a higher number.
Check ID code for each subcontractor row.
That field must identify the subcontractor itself, not the direct provider above it.
Check Subcontracted ICT service recipient's ID code.
For a subcontractor at rank n, that field must identify the provider at rank n-1 that receives the subcontracted ICT service.
Check Subcontracted ICT service recipient's ID type.
It must match the code type used for that recipient provider.
Check the scope of the chain.
Include all direct ICT third-party service providers, all ICT intra-group service providers, and, for ICT services supporting a critical or important function or material part of it, all subcontractors that effectively underpin that service.
Where an intra-group provider uses subcontractors, include at least the first extra-group subcontractor as well.
Related issues
I do not know how to enter multiple alternative providers
What this usually means
This issue is usually about Alternatives assessement and Alternative ICT providers. It is not the same kind of repeated-country problem as Data storage country or Data processing country.
What to check and how to fix it
Check whether alternative providers have actually been identified for that ICT third-party service provider.
If they have not, do not try to populate Alternative ICT providers.
Check Alternatives assessement.
If that answer is No or Assessment not performed, leave Alternative ICT providers empty.
If that answer is Yes, use Alternative ICT providers only for the alternative provider information you have actually identified.
Do not use that field for notes, explanations, or missing main-provider details.
Check whether you are trying to use Alternative ICT providers to fix a different problem, such as a missing main provider or a supply-chain entry.
If so, fix the main provider or supply-chain rows first.
If several alternative providers have been identified, enter them together in Alternative ICT providers separated by a space in the same field.
I am not sure what counts as a direct link
What this usually means
The link usually needs to open the actual document or file you want to reference. A general folder page, share page, preview shell, or sign-in landing page is usually not enough.
What to check and how to fix it
Check where the link opens.
If it opens a folder, dashboard, or general document library page, replace it with the link to the document itself.
Check whether the link still needs another click before the document can be opened or downloaded.
If it does, use the more direct document URL.
Check that you pasted only the URL.
If extra text, punctuation, or label text came with it, remove that and keep the link only.
Check the link outside your current session.
If it works only because you are already signed in or already inside a workspace, replace it with the direct document link intended for sharing.
Check that the link points to the exact document for that row, not just to a related document in the same folder.
What to do next
After you correct the affected rows or links, review the repeated entries for that same contract, ICT service, or supply chain together.
Most remaining failures come from one row still carrying the wrong value, one country field that should be Not Applicable, one supply-chain link pointing to the wrong provider, or one link still pointing to the wrong document.