{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1772 — RTS — ICT Incident Classification [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4","title":"Article 4 — Geographical spread","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","view_of":"/dora/level-2/rts/2024-1772-ict-incident-classification","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1772, OJ L, 2024/1772, 25.6.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","valid_from":"2024-07-15","valid_until":null,"content_id":"869159fc97250920","versions":["2024-07-15"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4/versions/2026-10-26/rev/869159fc97250920","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification#art-4","source_line":"Commission Delegated Regulation (EU) 2024/1772 · binding · OJ L, 2024/1772, 25.6.2024 · dated 13 Mar 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-03-13","published_on":"2024-06-25","entry_into_force":"2024-07-15","locators":{"document_date":"CELLAR 32024R1772 work_date_document","published_on":"CELLAR 32024R1772 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1772 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","path":"/dora/level-2/rts/2024-1772-ict-incident-classification","name":"Commission Delegated Regulation (EU) 2024/1772","number":"2024/1772","celex":"32024R1772","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents (Text with EEA relevance)","document_date":"2024-03-13"},"position":{"kind":"article","key":"4","index":4,"articles":13,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3","key":"3","title":"Article 3 — Duration and service downtime"},"next":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/5","key":"5","title":"Article 5 — Data losses"},"act_anchor":"#art-4"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification.md","unit_text_sha256":"2d152afeab44a23890842f8b3b08bf8c87b7ce7e84e3102df3b5207d7c25b6cf","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification/art-4","kind":"article","key":"4","heading":"Article 4 — Geographical spread","text":"## <a id=\"art-4\"></a>Article 4 — Geographical spread\n\nFor the purpose of determining the geographical spread with regard to the areas affected by the incident as referred to in [Article 18(1)](../../articles/18.md), point (c), of Regulation (EU) 2022/2554, financial entities shall assess whether the incident has or had an impact in other Member States, and in particular the significance of the impact in relation to any of the following:\\\n   <a id=\"art-4-p-a\"></a>a) clients and financial counterparts in other Member States;\\\n   <a id=\"art-4-p-b\"></a>b) branches or other financial entities within the group carrying out activities in other Member States;\\\n   <a id=\"art-4-p-c\"></a>c) financial market infrastructures or third-party providers, which may affect financial entities in other Member States to which they provide services, to the extent such information is available.\\\n\n","marks":[],"text_hash":"2d152afeab44a23890842f8b3b08bf8c87b7ce7e84e3102df3b5207d7c25b6cf","revision":1}}