{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/62","url":"https://www.headlesslaw.com/dora/articles/62","title":"Article 62 — Amendments to Regulation (EU) No 600/2014","family":"l1_hand","work_id":"dora","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":"2025-01-17","application":{"state":"applicable","next":null,"dates":[{"at":"2025-01-17","note":"Article 64"}]},"version_label":"Regulation (EU) 2022/2554, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","valid_from":"2022-12-27","valid_until":null,"revision":1,"content_id":"a6f512705fa093f6","change_date":null,"nearest_versions":["2022-12-27"],"first_text_date":"2022-12-14","correction_applies":false,"versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/dora/articles/62/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/dora/articles/62/versions/2022-12-27/rev/a6f512705fa093f6","versions_url":"https://www.headlesslaw.com/dora/articles/62/versions","relations_url":"https://www.headlesslaw.com/dora/articles/62/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","check":{"result":"matched","checked_at":"2026-11-09","against":"EUR-Lex"},"repo_path":null,"body_sha256":"26b0ae51ccc1d96e69f4003fc2aac058ab8a14ef5996e64b7021dfd8037cacf9","markdown_sha256":"039b927b36d80556d59eb6318500a3d7d3475d05f6655934f5561bda6b26a5f4"},"units":[{"locator":"dora/art/62","kind":"article","status":"in_force","label":null,"heading":"Amendments to Regulation (EU) No 600/2014","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"dora/art/62/subpara/1","kind":"subparagraph","status":"in_force","label":null,"heading":null,"text":"Regulation (EU) No 600/2014 is amended as follows:","marks":[],"revision":1,"text_hash":"61258e8f7e037b4ac09d54171fbaad6a7fd83c6b9845e18c0bffe9a29bd02174","reason":null},{"locator":"dora/art/62/para/1","kind":"point","status":"in_force","label":"1.","heading":null,"text":"Article 27g is amended as follows:","marks":[],"revision":1,"text_hash":"a62bc2082b72b1b04b1d0aceac268818d1886dc20053b6eb1e068a01abcf7062","reason":null},{"locator":"dora/art/62/para/1/pt/a","kind":"subpoint","status":"in_force","label":"(a)","heading":null,"text":"paragraph 4 is replaced by the following:","marks":[],"revision":1,"text_hash":"93dd22c55f0e59fdb2e57dbbbadb710f870aa5ec752a4e782e0dddfe612cd499","reason":null},{"locator":"dora/art/62/subpara/1/pt/1/subpt/a/para/4","kind":"paragraph","status":"in_force","label":"4.","heading":null,"text":"An APA shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554 of the European Parliament and of the Council.","marks":[],"revision":1,"text_hash":"6de3975497750fb344b0944a52f76bdf20ed855c2489323b2ce5ede55b0e5c2d","reason":null},{"locator":"dora/art/62/para/1/pt/b","kind":"subpoint","status":"in_force","label":"(b)","heading":null,"text":"in paragraph 8, point (c) is replaced by the following:","marks":[],"revision":1,"text_hash":"4420ba28e7e0403311e3654a27bc704758fdbfe5fffea535ee5d9f61bb8e4d0c","reason":null},{"locator":"dora/art/62/subpara/1/pt/1/subpt/b/subpt/c","kind":"subpoint","status":"in_force","label":"(c)","heading":null,"text":"the concrete organisational requirements laid down in paragraphs 3 and 5.’;","marks":[],"revision":1,"text_hash":"7ca901bf7d705f382f64d89e1976d7ef7ac702b982235ddd109e94b6517dbfcd","reason":null},{"locator":"dora/art/62/para/2","kind":"point","status":"in_force","label":"2.","heading":null,"text":"Article 27h is amended as follows:","marks":[],"revision":1,"text_hash":"ec13cd1d413b6bc5bda2b5015c6c3943ee40db9d293210a16293fcc234426a60","reason":null},{"locator":"dora/art/62/para/2/pt/a","kind":"subpoint","status":"in_force","label":"(a)","heading":null,"text":"paragraph 5 is replaced by the following:","marks":[],"revision":1,"text_hash":"33a0dd74fabae1f86731a168a3aff9e8171a42db67fcd439552441bdc831595e","reason":null},{"locator":"dora/art/62/subpara/1/pt/2/subpt/a/para/5","kind":"paragraph","status":"in_force","label":"5.","heading":null,"text":"A CTP shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554.’.","marks":[],"revision":1,"text_hash":"7a4338a5d7c11af2b8af9fc308ea03e1a1eec1f349d6a03fe4a6057ca7ff1837","reason":null},{"locator":"dora/art/62/para/2/pt/b","kind":"subpoint","status":"in_force","label":"(b)","heading":null,"text":"in paragraph 8, point (e) is replaced by the following:","marks":[],"revision":1,"text_hash":"182f072301100a3526a1ad7b047c568f16d12128325080c3a8853296387f4831","reason":null},{"locator":"dora/art/62/subpara/1/pt/2/subpt/b/subpt/e","kind":"subpoint","status":"in_force","label":"(e)","heading":null,"text":"the concrete organisational requirements laid down in paragraph 4.’;","marks":[],"revision":1,"text_hash":"38c51ff73ada9fc4cc6b31775b9f6b553f020d2162259ce518a55541701edfe1","reason":null},{"locator":"dora/art/62/para/3","kind":"point","status":"in_force","label":"3.","heading":null,"text":"Article 27i is amended as follows:","marks":[],"revision":1,"text_hash":"e71f1c09a95db9d21bcd3d4f2efd88917043786791a12e80c457e4cea45c4d6e","reason":null},{"locator":"dora/art/62/para/3/pt/a","kind":"subpoint","status":"in_force","label":"(a)","heading":null,"text":"paragraph 3 is replaced by the following:","marks":[],"revision":1,"text_hash":"218d09a1afd7b32fdd32d765c4c6d23c86b233d776bec37457acddab51e7352f","reason":null},{"locator":"dora/art/62/subpara/1/pt/3/subpt/a/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"An ARM shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554.’;","marks":[],"revision":1,"text_hash":"2573680e276ab3796a91fc07412e2868cb0fc154d9ff3025605d3ee0a296182a","reason":null},{"locator":"dora/art/62/para/3/pt/b","kind":"subpoint","status":"in_force","label":"(b)","heading":null,"text":"in paragraph 5, point (b) is replaced by the following:","marks":[],"revision":1,"text_hash":"19507007c3df9498ce2575ed6dec34a9c68b81f5aba0043a09128d0697a0008f","reason":null},{"locator":"dora/art/62/subpara/1/pt/3/subpt/b/subpt/b","kind":"subpoint","status":"in_force","label":"(b)","heading":null,"text":"the concrete organisational requirements laid down in paragraphs 2 and 4.’.","marks":[],"revision":1,"text_hash":"4c1b402a1e440c1d85257280da0b4f8da001be3eb75955d1962b3a46f13cfe6f","reason":null}],"markdown":"*In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)*\n\nRegulation (EU) No 600/2014 is amended as follows:\n\n<a id=\"p-1\"></a>**(1)** Article 27g is amended as follows:\n\n<a id=\"p-1-a\"></a>**(a)** paragraph 4 is replaced by the following:\n\n**‘4.** An APA shall comply with the requirements concerning the [security of network and information systems](https://www.headlesslaw.com/definitions/dora/security-of-network-and-information-systems) set out in Regulation (EU) 2022/2554 of the European Parliament and of the Council.\n\n<a id=\"p-1-b\"></a>**(b)** in paragraph 8, point (c) is replaced by the following:\n\n**‘(c)** the concrete organisational requirements laid down in paragraphs 3 and 5.’;\n\n<a id=\"p-2\"></a>**(2)** Article 27h is amended as follows:\n\n<a id=\"p-2-a\"></a>**(a)** paragraph 5 is replaced by the following:\n\n**‘5.** A CTP shall comply with the requirements concerning the [security of network and information systems](https://www.headlesslaw.com/definitions/dora/security-of-network-and-information-systems) set out in Regulation (EU) 2022/2554.’.\n\n<a id=\"p-2-b\"></a>**(b)** in paragraph 8, point (e) is replaced by the following:\n\n**‘(e)** the concrete organisational requirements laid down in paragraph 4.’;\n\n<a id=\"p-3\"></a>**(3)** Article 27i is amended as follows:\n\n<a id=\"p-3-a\"></a>**(a)** paragraph 3 is replaced by the following:\n\n**‘3.** An ARM shall comply with the requirements concerning the [security of network and information systems](https://www.headlesslaw.com/definitions/dora/security-of-network-and-information-systems) set out in Regulation (EU) 2022/2554.’;\n\n<a id=\"p-3-b\"></a>**(b)** in paragraph 5, point (b) is replaced by the following:\n\n**‘(b)** the concrete organisational requirements laid down in paragraphs 2 and 4.’.\n\n***\n\n[Chapter IX — Transitional and final provisions](../chapters/ix.md) › Section II — Amendments · [← Article 61](61.md) · [Article 63 →](63.md)\n"}