{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":12,"total":12,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/58","url":"https://www.headlesslaw.com/dora/articles/58","title":"Article 58 — Review clause","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/58/relations"},"as_of":"2022-12-27","counts":{"uses_term:out":6,"refers_to:out":6},"relations":[{"edge_id":"ae889fb568584498bf31","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical ICT third-party service providers","dst_raw":"eu.dora.definition.critical-ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/23","url":"/definitions/dora/critical-ict-third-party-service-provider","title":"Definitions","key":"3(23)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.a"}},{"edge_id":"cc3c817c702eb3dcf25e","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 31(2)","dst_raw":"eu.dora.article.31","other":{"work_id":"dora","level":"L1","locator":"dora/art/31","url":"/dora/articles/31","title":"Designation of critical ICT third-party service providers","key":"31","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.a"}},{"edge_id":"a48b30e11f530bf86fd7","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 2(3)","dst_raw":"eu.dora.article.2","other":{"work_id":"dora","level":"L1","locator":"dora/art/2","url":"/dora/articles/2","title":"Scope","key":"2","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.d"}},{"edge_id":"c38274f59bb978665499","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"significant cyber threats","dst_raw":"eu.dora.definition.significant-cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/13","url":"/definitions/dora/significant-cyber-threat","title":"Definitions","key":"3(13)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.b"}},{"edge_id":"e7c63395954656396d3d","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/19","url":"/dora/articles/19","title":"Reporting of major ICT-related incidents and voluntary notification of significant cyber threats","key":"19","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.b"}},{"edge_id":"16b02e3a7ac386029017","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 108","dst_raw":"eu.psd2.article.108","other":{"work_id":"psd2","level":null,"locator":null,"url":null,"title":null,"key":"eu.psd2.article.108","state_on_date":null},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.2","target_act":"Directive (EU) 2015/2366","target_celex":"32015L2366"}},{"edge_id":"0be62ade8a17df3bfeaf","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"subsidiary","dst_raw":"eu.dora.definition.subsidiary","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/25","url":"/definitions/dora/subsidiary","title":"Definitions","key":"3(25)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.c"}},{"edge_id":"0e0465e4420e627a7136","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Lead Overseer","dst_raw":"eu.dora.definition.lead-overseer","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/61","url":"/definitions/dora/lead-overseer","title":"Definitions","key":"3(61)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.c"}},{"edge_id":"43e32cb2003e4fe9f872","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical ICT third-party service providers","dst_raw":"eu.dora.definition.critical-ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/23","url":"/definitions/dora/critical-ict-third-party-service-provider","title":"Definitions","key":"3(23)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.c"}},{"edge_id":"86f5e1ffbcef7c9a60fe","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 35(1)","dst_raw":"eu.dora.article.35","other":{"work_id":"dora","level":"L1","locator":"dora/art/35","url":"/dora/articles/35","title":"Powers of the Lead Overseer","key":"35","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.c"}},{"edge_id":"d30b178933fe679d6285","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 31(12)","dst_raw":"eu.dora.article.31","other":{"work_id":"dora","level":"L1","locator":"dora/art/31","url":"/dora/articles/31","title":"Designation of critical ICT third-party service providers","key":"31","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.1.point.c"}},{"edge_id":"9130e1584e18bd7c96c4","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"digital operational resilience","dst_raw":"eu.dora.definition.digital-operational-resilience","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/1","url":"/definitions/dora/digital-operational-resilience","title":"Definitions","key":"3(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.58","source_block_id":"eu.dora.article.58.paragraph.3"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}