{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2025/299 — RTS — CASP Service Continuity [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4","url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4","title":"Article 4 — Business continuity plans","family":"l2_unit_view","work_id":"mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services","view_of":"/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2025/299, OJ L, 2025/299, 13.2.2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/299/oj/eng","valid_from":"2025-03-05","valid_until":null,"content_id":"c364d41d223e1d5b","versions":["2025-03-05"],"version_url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4/versions/2026-10-26/rev/c364d41d223e1d5b","versions_url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4/versions","relations_url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/4/relations","act_url":"https://www.headlesslaw.com/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services#art-4","source_line":"Commission Delegated Regulation (EU) 2025/299 · binding · OJ L, 2025/299, 13.2.2025 · dated 31 Oct 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-10-31","published_on":"2025-02-13","entry_into_force":"2025-03-05","locators":{"document_date":"CELLAR 32025R0299 work_date_document","published_on":"CELLAR 32025R0299 official-journal-act_date_publication","entry_into_force":"CELLAR 32025R0299 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services","path":"/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services","name":"Commission Delegated Regulation (EU) 2025/299","number":"2025/299","celex":"32025R0299","title_official":"COMMISSION DELEGATED REGULATION (EU) 2025/299 of 31 October 2024 supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council on markets in crypto-assets with regard to regulatory technical standards on continuity and regularity in the performance of crypto-asset services (Text with EEA relevance)","document_date":"2024-10-31"},"position":{"kind":"article","key":"4","index":4,"articles":7,"annexes":1},"prev":{"path":"/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/3","key":"3","title":"Article 3 — Business continuity policy"},"next":{"path":"/mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/articles/5","key":"5","title":"Article 5 — Periodic testing of the business continuity plans"},"act_anchor":"#art-4"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/299/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services.md","unit_text_sha256":"f5db09b6f8cc3afbe35dd449944a2072f2a4e05b6b625c70705d24e81cc06c46","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"mica/level-2/rts/regulatory-technical-standards-continuity-regularity-performance-crypto-asset-services/art-4","kind":"article","key":"4","heading":"Article 4 — Business continuity plans","text":"### <a id=\"art-4\"></a>Article 4 — Business continuity plans\n\n1. <a id=\"art-4-p-1\"></a>When implementing the business continuity policy referred to in [Article 68(7)](../../articles/68.md) of Regulation (EU) 2023/1114, crypto-asset service providers shall establish business continuity plans. The business continuity plans shall set out the procedures necessary to protect and, where necessary, re-establish:\\\n   <a id=\"art-4-p-1-a\"></a>a) the confidentiality, integrity, and availability of [client](https://www.headlesslaw.com/definitions/mica/client) data;\\\n   <a id=\"art-4-p-1-b\"></a>b) the availability of the business functions, supporting processes and information assets of the crypto-asset service providers.\n2. <a id=\"art-4-p-2\"></a>The business continuity plans shall contain the following:\\\n   <a id=\"art-4-p-2-a\"></a>a) a range of possible adverse scenarios relating to the operation of critical or important functions, including the unavailability of business functions, staff, workspace, external suppliers, data centres, or loss or alteration of critical data and documents;\\\n   <a id=\"art-4-p-2-b\"></a>b) the procedures and policies to be followed in case of a disruptive incident, including:\\\n   <a id=\"art-4-p-2-b-i\"></a>i) the measures that are necessary to recover critical or important functions;\\\n   <a id=\"art-4-p-2-b-ii\"></a>ii) the deadlines by which those critical or important functions are to be recovered;\\\n   <a id=\"art-4-p-2-b-iii\"></a>iii) recovery point objectives;\\\n   <a id=\"art-4-p-2-b-iv\"></a>iv) the maximum time to resume services;\\\n   <a id=\"art-4-p-2-c\"></a>c) the procedures and policies for relocating the business functions used to provide crypto-asset services to a back-up site;\\\n   <a id=\"art-4-p-2-d\"></a>d) back-up of critical business data, including up-to-date information of the necessary contacts to ensure communication inside the crypto-asset service provider, between the crypto-asset service provider and its clients;\\\n   <a id=\"art-4-p-2-e\"></a>e) procedures for timely communications with clients and other external stakeholders, including competent authorities.\n3.  <a id=\"art-4-p-3\"></a>In the event of a disruption involving a permissionless distributed ledger used by the crypto asset service provider in the provision of its services, the communications referred to in paragraph 2, point (e) shall include the following information:\\\n    <a id=\"art-4-p-3-a\"></a>a) when the services are expected to be resumed;\\\n    <a id=\"art-4-p-3-b\"></a>b) the reasons and the impact of the disruptive incident;\\\n    <a id=\"art-4-p-3-c\"></a>c) any risks concerning clients’ [funds](https://www.headlesslaw.com/definitions/mica/funds) and crypto-assets held on their behalf;\\\n    <a id=\"art-4-p-3-d\"></a>d) measures that the crypto-asset service intends to take in response to the disruption of a permissionless distributed ledger.\n\n    Where that information is not readily available to the crypto-asset service provider, the crypto-asset service provider shall communicate updates as regards the information in the first subparagraph to clients and stakeholders, including competent authorities, on a best effort basis.\n4. <a id=\"art-4-p-4\"></a>The business continuity plans shall contain procedures to address any disruptions of outsourced critical or important functions, including where those critical or important functions become unavailable.\n\n","marks":[],"text_hash":"f5db09b6f8cc3afbe35dd449944a2072f2a4e05b6b625c70705d24e81cc06c46","revision":1}}