{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1772 — RTS — ICT Incident Classification [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2","title":"Article 2 — Reputational impact","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","view_of":"/dora/level-2/rts/2024-1772-ict-incident-classification","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1772, OJ L, 2024/1772, 25.6.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","valid_from":"2024-07-15","valid_until":null,"content_id":"3b5a678bcaf7b269","versions":["2024-07-15"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2/versions/2026-10-26/rev/3b5a678bcaf7b269","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification#art-2","source_line":"Commission Delegated Regulation (EU) 2024/1772 · binding · OJ L, 2024/1772, 25.6.2024 · dated 13 Mar 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-03-13","published_on":"2024-06-25","entry_into_force":"2024-07-15","locators":{"document_date":"CELLAR 32024R1772 work_date_document","published_on":"CELLAR 32024R1772 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1772 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","path":"/dora/level-2/rts/2024-1772-ict-incident-classification","name":"Commission Delegated Regulation (EU) 2024/1772","number":"2024/1772","celex":"32024R1772","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents (Text with EEA relevance)","document_date":"2024-03-13"},"position":{"kind":"article","key":"2","index":2,"articles":13,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/1","key":"1","title":"Article 1 — Clients, financial counterparts and transactions"},"next":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3","key":"3","title":"Article 3 — Duration and service downtime"},"act_anchor":"#art-2"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification.md","unit_text_sha256":"530f0c33ba149db083e22c5c072dcaf2fae93cd68c232a3ace6196a9d34b1c94","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification/art-2","kind":"article","key":"2","heading":"Article 2 — Reputational impact","text":"## <a id=\"art-2\"></a>Article 2 — Reputational impact\n\n1. <a id=\"art-2-p-1\"></a>For the purposes of determining the reputational impact of the incident as referred to in [Article 18(1)](../../articles/18.md), point (a), of Regulation (EU) 2022/2554, financial entities shall consider that a reputational impact has occurred where at least one of the following criteria is met:\\\n   <a id=\"art-2-p-1-a\"></a>a) the incident has been reflected in the media;\\\n   <a id=\"art-2-p-1-b\"></a>b) the incident has resulted in repetitive complaints from different clients or financial counterparts on client-facing services or critical business relationships;\\\n   <a id=\"art-2-p-1-c\"></a>c) the financial entity will not be able to or is likely not to be able to meet regulatory requirements as a result of the incident;\\\n   <a id=\"art-2-p-1-d\"></a>d) the financial entity will or is likely to lose clients or financial counterparts with a material impact on its business as a result of the incident.\\\n2. <a id=\"art-2-p-2\"></a>When assessing the reputational impact of the incident, financial entities shall take into account the level of visibility that the incident has gained or is likely to gain in relation to each criterion listed in paragraph 1.\n\n","marks":[],"text_hash":"530f0c33ba149db083e22c5c072dcaf2fae93cd68c232a3ace6196a9d34b1c94","revision":1}}