{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2025/301 — RTS — Major ICT Incident Reporting [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1","url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1","title":"Article 1 — General information to be provided in initial notifications and intermediate and final reports on major ICT-related incidents","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2025-301-major-ict-incident-reporting","view_of":"/dora/level-2/rts/2025-301-major-ict-incident-reporting","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2025/301, OJ L, 2025/301, 20.2.2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/301/oj/eng","valid_from":"2025-03-12","valid_until":null,"content_id":"f72d2562bdfa3b48","versions":["2025-03-12"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1/versions/2026-10-26/rev/f72d2562bdfa3b48","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/1/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2025-301-major-ict-incident-reporting#art-1","source_line":"Commission Delegated Regulation (EU) 2025/301 · binding · OJ L, 2025/301, 20.2.2025 · dated 23 Oct 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-10-23","published_on":"2025-02-20","entry_into_force":"2025-03-12","locators":{"document_date":"CELLAR 32025R0301 work_date_document","published_on":"CELLAR 32025R0301 official-journal-act_date_publication","entry_into_force":"CELLAR 32025R0301 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2025-301-major-ict-incident-reporting","path":"/dora/level-2/rts/2025-301-major-ict-incident-reporting","name":"Commission Delegated Regulation (EU) 2025/301","number":"2025/301","celex":"32025R0301","title_official":"COMMISSION DELEGATED REGULATION (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats (Text with EEA relevance)","document_date":"2024-10-23"},"position":{"kind":"article","key":"1","index":1,"articles":7,"annexes":0},"prev":null,"next":{"path":"/dora/level-2/rts/2025-301-major-ict-incident-reporting/articles/2","key":"2","title":"Article 2 — Specific information to be provided in initial notifications"},"act_anchor":"#art-1"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/301/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/rts/2025-301-major-ict-incident-reporting.md","unit_text_sha256":"a4065dcfbae4b7d405b25fd60bcd7b32312b37788268d659e082e78276f3dd60","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/rts/2025-301-major-ict-incident-reporting/art-1","kind":"article","key":"1","heading":"Article 1 — General information to be provided in initial notifications and intermediate and final reports on major ICT-related incidents","text":"## Article 1 — General information to be provided in initial notifications and intermediate and final reports on major ICT-related incidents\n\nFinancial entities shall include in the initial notification, the intermediate report, and the final report, as referred to in [Article 19(4)](../../articles/19.md) of Regulation (EU) 2022/2554, the following general information:\\\n a) the type of submission (initial notification, intermediate report, or final report);\\\n b) the name of the financial entity, its LEI code, and the type of financial entity, as referred to in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554;\\\n c) the name and identification code of the entity that submits the initial notification, or intermediate or final report, for the financial entity;\\\n d) where applicable, the names and LEI codes of all financial entities covered in the aggregated initial notification or intermediate or final report;\\\n e) the contact details of the persons responsible for communicating with the competent authority on the major ICT-related incident;\\\n f) where applicable, the identification of the parent undertaking of the group to which the financial entity belongs;\\\n g) where there is monetary impact, the currency the amounts are based on.\\\n\n","marks":[],"text_hash":"a4065dcfbae4b7d405b25fd60bcd7b32312b37788268d659e082e78276f3dd60","revision":1}}