{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2025/1143 — RTS — Authorisation and organisational requirements [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7","url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7","title":"Article 7 — Information on digital operational resilience (Article 27d(1) of Regulation (EU) No 600/2014)","family":"l2_unit_view","work_id":"spaces/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june","view_of":"/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2025/1143, OJ L, 2025/1143, 3.11.2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/1143/oj/eng","valid_from":"2025-11-23","valid_until":null,"content_id":"917dfa922bcb1b4e","versions":["2025-11-23"],"version_url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7/versions/2026-10-26/rev/917dfa922bcb1b4e","versions_url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7/versions","relations_url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/7/relations","act_url":"https://www.headlesslaw.com/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june#art-7","source_line":"Commission Delegated Regulation (EU) 2025/1143 · binding · OJ L, 2025/1143, 3.11.2025 · dated 12 Jun 2025 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2025-06-12","published_on":"2025-11-03","entry_into_force":"2025-11-23","locators":{"document_date":"CELLAR 32025R1143 work_date_document","published_on":"CELLAR 32025R1143 official-journal-act_date_publication","entry_into_force":"CELLAR 32025R1143 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june","path":"/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june","name":"Commission Delegated Regulation (EU) 2025/1143","number":"2025/1143","celex":"32025R1143","title_official":"COMMISSION DELEGATED REGULATION (EU) 2025/1143 of 12 June 2025 supplementing Regulation (EU) No 600/2014 of the European Parliament and of the Council with regard to regulatory technical standards on the authorisation and organisational requirements for approved publication arrangements and approved reporting mechanisms, and on the authorisation requirements for consolidated tape providers, and repealing Commission Delegated Regulation (EU) 2017/571 (Text with EEA relevance)","document_date":"2025-06-12"},"position":{"kind":"article","key":"7","index":7,"articles":32,"annexes":0},"prev":{"path":"/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/6","key":"6","title":"Article 6 — Information on internal controls (Article 27d(1) of Regulation (EU) No 600/2014)"},"next":{"path":"/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/articles/8","key":"8","title":"Article 8 — Conflicts of interest (Article 27g(3) and Article 27i(2) of Regulation (EU) No 600/2014)"},"act_anchor":"#art-7"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2025/1143/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june.md","unit_text_sha256":"3ef1e2d8d4577c7d7c8deff25fab23a9c42c1c5b5d1fb94db62b6d2391035775","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/mifir/level-2/rts/2025-1143-commission-delegated-regulation-eu-2025-1143-of-12-june/art-7","kind":"article","key":"7","heading":"Article 7 — Information on digital operational resilience (Article 27d(1) of Regulation (EU) No 600/2014)","text":"## <a id=\"art-7\"></a>Article 7 — Information on digital operational resilience (Article 27d(1) of Regulation (EU) No 600/2014)\n\n1. <a id=\"art-7-p-1\"></a>An applicant seeking authorisation to operate an APA or an ARM pursuant to Article 27d of Regulation (EU) No 600/2014 shall include in its application for authorisation evidence of compliance with the requirements on ICT risk management organisation and capabilities, operational resilience strategy and testing, incident management and ICT third-party risk management under Regulation (EU) 2022/2554.\n1. <a id=\"art-7-p-2\"></a>The information set out in paragraph 1 shall include documents regarding the applicant’s arrangements, in accordance with Regulation (EU) 2022/2554, on:\n\n    <a id=\"art-7-p-2-a\"></a>**(a)** ICT risk-management;\n\n    <a id=\"art-7-p-2-b\"></a>**(b)** ICT-related incident management;\n\n    <a id=\"art-7-p-2-c\"></a>**(c)** digital operational resilience testing;\n\n    <a id=\"art-7-p-2-d\"></a>**(d)** ICT third-party risk monitoring.\n\n1. <a id=\"art-7-p-3\"></a>The information set out in paragraph 1 shall take into account the size and overall risk profile, and the nature, scale and complexity of the applicant’s services, activities and operations.\n\n**SECTION II — Organisational requirements for APAs and ARMs — (Article 27g(1), (3) and (5), Article 27i(2) and (4) of Regulation (EU) No 600/2014)**\n\n","marks":[],"text_hash":"3ef1e2d8d4577c7d7c8deff25fab23a9c42c1c5b5d1fb94db62b6d2391035775","revision":1}}