DORA applies to roughly 22,000 entities in the EU and violators can face fines of up to 2% of gross revenue.