{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/59","url":"https://www.headlesslaw.com/dora/articles/59","title":"Article 59 — Amendments to Regulation (EC) No 1060/2009","family":"l1_hand","work_id":"dora","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":"2025-01-17","application":{"state":"applicable","next":null,"dates":[{"at":"2025-01-17","note":"Article 64"}]},"version_label":"Regulation (EU) 2022/2554, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","valid_from":"2022-12-27","valid_until":null,"revision":1,"content_id":"8c1253ba3012ba13","change_date":null,"nearest_versions":["2022-12-27"],"first_text_date":"2022-12-14","correction_applies":false,"versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/dora/articles/59/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/dora/articles/59/versions/2022-12-27/rev/8c1253ba3012ba13","versions_url":"https://www.headlesslaw.com/dora/articles/59/versions","relations_url":"https://www.headlesslaw.com/dora/articles/59/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","check":{"result":"matched","checked_at":"2026-11-09","against":"EUR-Lex"},"repo_path":null,"body_sha256":"0ec12913db3cc6e0c1f6e159ae7a6766be545dbf5021349d7f926d6e292cbef7","markdown_sha256":"68440966601b96c38dbeb6ca83ef7cfdad6b7f01696934d11ab12011b1822157"},"units":[{"locator":"dora/art/59","kind":"article","status":"in_force","label":null,"heading":"Amendments to Regulation (EC) No 1060/2009","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"dora/art/59/subpara/1","kind":"subparagraph","status":"in_force","label":null,"heading":null,"text":"Regulation (EC) No 1060/2009 is amended as follows:","marks":[],"revision":1,"text_hash":"46b4541501b5fd7d9e08d229a145d124a6218a4a0c003de94ac4ab10b3ac691b","reason":null},{"locator":"dora/art/59/para/1","kind":"point","status":"in_force","label":"1.","heading":null,"text":"in Annex I, Section A, point 4, the first subparagraph is replaced by the following:","marks":[],"revision":1,"text_hash":"a7fd10b109a22260cfdba9d6745875cf2117fc6c76066687f3d57f68f1cea80a","reason":null},{"locator":"dora/art/59/para/1/cont/1","kind":"continuation","status":"in_force","label":null,"heading":null,"text":"‘A credit rating agency shall have sound administrative and accounting procedures, internal control mechanisms, effective procedures for risk assessment, and effective control and safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554 of the European Parliament and of the Council.","marks":[],"revision":1,"text_hash":"441416e6465cdeceb6aaae9fe0c5b237ecced7a98ab53cbe426a6c79e0433138","reason":null},{"locator":"dora/art/59/para/2","kind":"point","status":"in_force","label":"2.","heading":null,"text":"in Annex III, point 12 is replaced by the following:","marks":[],"revision":1,"text_hash":"e5ab9901becfbb202bf6b702039ccce2d4f6a99cfccd38c03632e016c14f7cc7","reason":null},{"locator":"dora/art/59/subpara/1/pt/2/para/12","kind":"paragraph","status":"in_force","label":"12.","heading":null,"text":"The credit rating agency infringes Article 6(2), in conjunction with point 4 of Section A of Annex I, by not having sound administrative or accounting procedures, internal control mechanisms, effective procedures for risk assessment, or effective control or safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554; or by not implementing or maintaining decision-making procedures or organisational structures as required by that point.’.","marks":[],"revision":1,"text_hash":"0d4716153e871f15cf7090cca61c3569ca1ed80c8ab6bf64580b049fc1ed99cb","reason":null}],"markdown":"*In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)*\n\nRegulation (EC) No 1060/2009 is amended as follows:\n\n<a id=\"p-1\"></a>**(1)** in Annex I, Section A, point 4, the first subparagraph is replaced by the following:\n\n‘A [credit rating agency](https://www.headlesslaw.com/definitions/dora/credit-rating-agency) shall have sound administrative and accounting procedures, internal control mechanisms, effective procedures for risk assessment, and effective control and safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554 of the European Parliament and of the Council.\n\n<a id=\"p-2\"></a>**(2)** in Annex III, point 12 is replaced by the following:\n\n**‘12.** The [credit rating agency](https://www.headlesslaw.com/definitions/dora/credit-rating-agency) infringes [Article 6(2)](6.md), in conjunction with point 4 of Section A of Annex I, by not having sound administrative or accounting procedures, internal control mechanisms, effective procedures for risk assessment, or effective control or safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554; or by not implementing or maintaining decision-making procedures or organisational structures as required by that point.’.\n\n***\n\n[Chapter IX — Transitional and final provisions](../chapters/ix.md) › Section II — Amendments · [← Article 58](58.md) · [Article 60 →](60.md)\n"}