{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2025/302 — ITS — Major Incident Templates [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1","url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1","title":"Article 1 — Template for reporting ICT-related major incidents","family":"l2_unit_view","work_id":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates","view_of":"/dora/level-2/its/2025-302-major-incident-reporting-templates","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Implementing Regulation (EU) 2025/302, OJ L, 2025/302, 20.2.2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_impl/2025/302/oj/eng","valid_from":"2025-03-12","valid_until":null,"content_id":"3d782a5bece1a0b0","versions":["2025-03-12"],"version_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1/versions/2026-10-26/rev/3d782a5bece1a0b0","versions_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/1/relations","act_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates#art-1","source_line":"Commission Implementing Regulation (EU) 2025/302 · binding · OJ L, 2025/302, 20.2.2025 · dated 23 Oct 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-10-23","published_on":"2025-02-20","entry_into_force":"2025-03-12","locators":{"document_date":"CELLAR 32025R0302 work_date_document","published_on":"CELLAR 32025R0302 official-journal-act_date_publication","entry_into_force":"CELLAR 32025R0302 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates","path":"/dora/level-2/its/2025-302-major-incident-reporting-templates","name":"Commission Implementing Regulation (EU) 2025/302","number":"2025/302","celex":"32025R0302","title_official":"COMMISSION IMPLEMENTING REGULATION (EU) 2025/302 of 23 October 2024 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat (Text with EEA relevance)","document_date":"2024-10-23"},"position":{"kind":"article","key":"1","index":1,"articles":9,"annexes":4},"prev":null,"next":{"path":"/dora/level-2/its/2025-302-major-incident-reporting-templates/articles/2","key":"2","title":"Article 2 — Joint submission of initial notification, intermediate and final reports"},"act_anchor":"#art-1"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_impl/2025/302/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates.md","unit_text_sha256":"bd6af064cfb496d356d387214ec85879fb907fd9d6b5b30c782b884d0296f5b8","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates/art-1","kind":"article","key":"1","heading":"Article 1 — Template for reporting ICT-related major incidents","text":"## <a id=\"art-1\"></a>Article 1 — Template for reporting ICT-related major incidents\n\n1. <a id=\"art-1-p-1\"></a>Financial entities shall use the template laid down in Annex I to submit the initial notification, the intermediate report, and the final report referred to in [Article 19(4)](../../articles/19.md) of Regulation (EU) 2022/2554 as follows:\\\n   <a id=\"art-1-p-1-a\"></a>a) financial entities that submit an initial notification shall complete the data fields of the template which correspond to the information to be provided in accordance with Article 2 of Commission Delegated Regulation (EU) 2025/301, and may, where they already have that information, complete those data fields the completion of which is not required for an initial notification but is required for an intermediate or final report;\\\n   <a id=\"art-1-p-1-b\"></a>b) financial entities that submit an intermediate report shall complete the data fields of the template which correspond to the information to be provided in accordance with Article 3 of Delegated Regulation (EU) 2025/301 and may, where they already have the relevant information, complete data fields the completion of which is not required for the intermediate report, but is required for the final report.\\\n   <a id=\"art-1-p-1-c\"></a>c) financial entities that submit a final report shall complete the data fields of the template which correspond to the information to be provided in accordance with Article 4 of Delegated Regulation (EU) 2025/301.\\\n2. <a id=\"art-1-p-2\"></a>Financial entities shall ensure that the information contained in the initial notification, and in the intermediate and final report, is complete and accurate.\n3. <a id=\"art-1-p-3\"></a>Financial entities shall provide estimated values based on other available data and information, to the extent possible, where accurate data are not available at the time of reporting for the initial notification or the intermediate report.\n4. <a id=\"art-1-p-4\"></a>When submitting an intermediate or final report, financial entities shall use the template laid down in Annex I to submit all required information and update, where applicable, the information that was previously provided in the initial notification or in the intermediate report.\n5. <a id=\"art-1-p-5\"></a>Financial entities shall follow the data glossary and instructions set out in Annex II when completing the template laid down in Annex I.\n\n","marks":[],"text_hash":"bd6af064cfb496d356d387214ec85879fb907fd9d6b5b30c782b884d0296f5b8","revision":1}}