{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":30,"total":30,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/19","url":"https://www.headlesslaw.com/dora/articles/19","title":"Article 19 — Reporting of major ICT-related incidents and voluntary notification of significant cyber threats","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/19/relations"},"as_of":"2022-12-27","counts":{"refers_to:out":12,"uses_term:out":10,"refers_to:in":8},"relations":[{"edge_id":"04726d2297a5950a82b3","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 2(1)","dst_raw":"eu.dora.article.2","other":{"work_id":"dora","level":"L1","locator":"dora/art/2","url":"/dora/articles/2","title":"Scope","key":"2","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.b"}},{"edge_id":"795c1587e5fa1288ef62","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4","dst_raw":"Directive 2013/36/EU","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.2","target_act":"Directive 2013/36/EU","target_celex":"32013L0036"}},{"edge_id":"a2020a33e15f808ed57a","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(4)","dst_raw":"Regulation (EU) No 1024/2013","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.2","target_act":"Regulation (EU) No 1024/2013","target_celex":"32013R1024"}},{"edge_id":"b3c7efd777643aff3f30","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"significant cyber threats","dst_raw":"eu.dora.definition.significant-cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/13","url":"/definitions/dora/significant-cyber-threat","title":"Definitions","key":"3(13)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.2"}},{"edge_id":"8ff6a25edbc9a26ff1ef","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incident","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.7"}},{"edge_id":"9d7906f446c172320055","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incident","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6"}},{"edge_id":"23b9b221bcb62ad466de","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 20","dst_raw":"eu.dora.article.20","other":{"work_id":"dora","level":"L1","locator":"dora/art/20","url":"/dora/articles/20","title":"Harmonisation of reporting content and templates","key":"20","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.4"}},{"edge_id":"b272de1f0ece2fcf327f","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incident","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.3"}},{"edge_id":"269d0728d12c4cf193f5","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 20","dst_raw":"eu.dora.article.20","other":{"work_id":"dora","level":"L1","locator":"dora/art/20","url":"/dora/articles/20","title":"Harmonisation of reporting content and templates","key":"20","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.1"}},{"edge_id":"550ebca8793ceebde35b","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 46","dst_raw":"eu.dora.article.46","other":{"work_id":"dora","level":"L1","locator":"dora/art/46","url":"/dora/articles/46","title":"Competent authorities","key":"46","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.1"}},{"edge_id":"57e7dda080db9ae18f15","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4","dst_raw":"Directive 2013/36/EU","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.1","target_act":"Directive 2013/36/EU","target_celex":"32013L0036"}},{"edge_id":"b7cdf1e52e25bcfd20d0","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(4)","dst_raw":"Regulation (EU) No 1024/2013","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.1","target_act":"Regulation (EU) No 1024/2013","target_celex":"32013R1024"}},{"edge_id":"dd63054dd5b88349db1c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incidents","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.1"}},{"edge_id":"f68ea8103d4ca4718fec","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"public authorities","dst_raw":"eu.dora.definition.public-authority","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/65","url":"/definitions/dora/public-authority","title":"Definitions","key":"3(65)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.e"}},{"edge_id":"698596601d1ca361c726","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incident","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.4.point.b"}},{"edge_id":"1cf1e01ad96d74beb45a","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"groups","dst_raw":"eu.dora.definition.group","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/26","url":"/definitions/dora/group","title":"Definitions","key":"3(26)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.d"}},{"edge_id":"72fc5eb3603e10f315d5","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 2(1)","dst_raw":"Directive 2014/59/EU","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.d","target_act":"Directive 2014/59/EU","target_celex":"32014L0059"}},{"edge_id":"90b6b8c5a2843909a24a","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 3","dst_raw":"Directive 2014/59/EU","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.d","target_act":"Directive 2014/59/EU","target_celex":"32014L0059"}},{"edge_id":"927532eb8bd771d21b10","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 7(2)","dst_raw":"Regulation (EU) No 806/2014","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.d","target_act":"Regulation (EU) No 806/2014","target_celex":"32014R0806"}},{"edge_id":"978f581f33b350c2d2ad","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 7(4)","dst_raw":"Regulation (EU) No 806/2014","other":null,"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.6.point.d","target_act":"Regulation (EU) No 806/2014","target_celex":"32014R0806"}},{"edge_id":"44408823b1a55e3a86c4","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incident","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.8"}},{"edge_id":"74c522b21872c4981b39","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"central securities depository","dst_raw":"eu.dora.definition.central-securities-depository","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/42","url":"/definitions/dora/central-securities-depository","title":"Definitions","key":"3(42)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.19","source_block_id":"eu.dora.article.19.paragraph.8"}},{"edge_id":"285bd252385788136163","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(1)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/18/para/3/pt/a","url":"/dora/articles/18#p-3-a","title":"Classification of ICT-related incidents and cyber threats","key":"18(3)(a)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.a"}},{"edge_id":"4bc1a6c2f5a64b19dc18","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/11/para/2/pt/e","url":"/dora/articles/11#p-2-e","title":"Response and recovery","key":"11(2)(e)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.11","source_block_id":"eu.dora.article.11.paragraph.2.point.e"}},{"edge_id":"682746e32137148b6e48","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(6)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/22/para/2","url":"/dora/articles/22#p-2","title":"Supervisory feedback","key":"22(2)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.22","source_block_id":"eu.dora.article.22.paragraph.2"}},{"edge_id":"711ab7ca463267328a2e","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(1)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/22/para/1","url":"/dora/articles/22#p-1","title":"Supervisory feedback","key":"22(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.22","source_block_id":"eu.dora.article.22.paragraph.1"}},{"edge_id":"ca6c2329298b7c07d7d3","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(6)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/18/para/3/pt/b","url":"/dora/articles/18#p-3-b","title":"Classification of ICT-related incidents and cyber threats","key":"18(3)(b)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.b"}},{"edge_id":"e7c63395954656396d3d","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/58/para/1/pt/b","url":"/dora/articles/58#p-1-b","title":"Review clause","key":"58(1)(b)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.b"}},{"edge_id":"f23b19dd7dffd1f9bbb5","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(4)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/22/para/1","url":"/dora/articles/22#p-1","title":"Supervisory feedback","key":"22(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.22","source_block_id":"eu.dora.article.22.paragraph.1"}},{"edge_id":"fe327da104b8fea70097","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(4)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/20","url":"/dora/articles/20","title":"Harmonisation of reporting content and templates","key":"20","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.20","source_block_id":"eu.dora.article.20"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}