{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/23","url":"https://www.headlesslaw.com/dora/articles/23","title":"Article 23 — Operational or security payment-related incidents concerning credit institutions, payment institutions, account information service providers, and electronic money institutions","family":"l1_hand","work_id":"dora","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":"2025-01-17","application":{"state":"applicable","next":null,"dates":[{"at":"2025-01-17","note":"Article 64"}]},"version_label":"Regulation (EU) 2022/2554, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","valid_from":"2022-12-27","valid_until":null,"revision":1,"content_id":"8de2243d5f8e3512","change_date":null,"nearest_versions":["2022-12-27"],"first_text_date":"2022-12-14","correction_applies":false,"versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/dora/articles/23/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/dora/articles/23/versions/2022-12-27/rev/8de2243d5f8e3512","versions_url":"https://www.headlesslaw.com/dora/articles/23/versions","relations_url":"https://www.headlesslaw.com/dora/articles/23/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","check":{"result":"matched","checked_at":"2026-11-09","against":"EUR-Lex"},"repo_path":null,"body_sha256":"d13628619d6527ca3277d9938b49eddff70afcaa49d451f146437af081bda984","markdown_sha256":"b46e475c9b1c4b4569ca614ace194cee7fa5bcc22f9ff6389c4358054e21b4a9"},"units":[{"locator":"dora/art/23","kind":"article","status":"in_force","label":null,"heading":"Operational or security payment-related incidents concerning credit institutions, payment institutions, account information service providers, and electronic money institutions","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"dora/art/23/subpara/1","kind":"subparagraph","status":"in_force","label":null,"heading":null,"text":"The requirements laid down in this Chapter shall also apply to operational or security payment-related incidents and to major operational or security payment-related incidents, where they concern credit institutions, payment institutions, account information service providers, and electronic money institutions.","marks":[],"revision":1,"text_hash":"94e91761671efabfc2dee2aa42f17275b2c2b6ddb4db08dd4e4dd1d7bab23319","reason":null}],"markdown":"*In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)*\n\nThe requirements laid down in this Chapter shall also apply to [operational or security payment-related incidents](https://www.headlesslaw.com/definitions/dora/operational-or-security-payment-related-incident) and to [major operational or security payment-related incidents](https://www.headlesslaw.com/definitions/dora/major-operational-or-security-payment-related-incident), where they concern [credit institutions](https://www.headlesslaw.com/definitions/dora/credit-institution), [payment institutions](https://www.headlesslaw.com/definitions/dora/payment-institution), [account information service providers](https://www.headlesslaw.com/definitions/dora/account-information-service-provider), and [electronic money institutions](https://www.headlesslaw.com/definitions/dora/electronic-money-institution).\n\n***\n\n[Chapter III — ICT-related incident management, classification and reporting](../chapters/iii.md) · [← Article 22](22.md) · [Article 24 →](24.md)\n"}