{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":11,"total":11,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/4","url":"https://www.headlesslaw.com/dora/articles/4","title":"Article 4 — Proportionality principle","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/4/relations"},"as_of":"2022-12-27","counts":{"refers_to:out":2,"uses_term:out":1,"refers_to:in":8},"relations":[{"edge_id":"10f8fe518f91b9c24165","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 16(2)","dst_raw":"eu.dora.article.16","other":{"work_id":"dora","level":"L1","locator":"dora/art/16","url":"/dora/articles/16","title":"Simplified ICT risk management framework","key":"16","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.4","source_block_id":"eu.dora.article.4.paragraph.3"}},{"edge_id":"20d764b767bcddfabc30","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(5)","dst_raw":"eu.dora.article.6","other":{"work_id":"dora","level":"L1","locator":"dora/art/6","url":"/dora/articles/6","title":"ICT risk management framework","key":"6","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.4","source_block_id":"eu.dora.article.4.paragraph.3"}},{"edge_id":"7b40e4db80ea90bd8d1f","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.4","source_block_id":"eu.dora.article.4.paragraph.3"}},{"edge_id":"220550f3662bd4acd440","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/24/para/3","url":"/dora/articles/24#p-3","title":"General requirements for the performance of digital operational resilience testing","key":"24(3)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.24","source_block_id":"eu.dora.article.24.paragraph.3"}},{"edge_id":"3c1d0decd2f5235b76e5","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/24/para/1","url":"/dora/articles/24#p-1","title":"General requirements for the performance of digital operational resilience testing","key":"24(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.24","source_block_id":"eu.dora.article.24.paragraph.1"}},{"edge_id":"411a9340e211f9018ac4","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/26/para/8","url":"/dora/articles/26#p-8","title":"Advanced testing of ICT tools, systems and processes based on TLPT","key":"26(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8"}},{"edge_id":"4c8c05c1b48ae4d82716","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/28/para/8","url":"/dora/articles/28#p-8","title":"General principles","key":"28(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.8"}},{"edge_id":"53019cad95183adede85","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/7","url":"/dora/articles/7","title":"ICT systems, protocols and tools","key":"7","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.7","source_block_id":"eu.dora.article.7"}},{"edge_id":"660dfe9f783f760b322e","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/9/para/3","url":"/dora/articles/9#p-3","title":"Protection and prevention","key":"9(3)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.9","source_block_id":"eu.dora.article.9.paragraph.3"}},{"edge_id":"c162a2b39ac7c3bf0c54","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/25/para/1","url":"/dora/articles/25#p-1","title":"Testing of ICT tools and systems","key":"25(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.1"}},{"edge_id":"f73804f2993b63346197","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/18/para/4","url":"/dora/articles/18#p-4","title":"Classification of ICT-related incidents and cyber threats","key":"18(4)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.4"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}