{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/recitals/23","url":"https://www.headlesslaw.com/nis2/recitals/23","title":"Recital 23","family":"l1_recital_view","work_id":"nis2","view_of":"/nis2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Directive (EU) 2022/2555, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","valid_from":"2022-12-27","valid_until":null,"content_id":"d91a6e868c4d37a8","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/recitals/23/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/recitals/23/versions/2022-12-27/rev/d91a6e868c4d37a8","versions_url":"https://www.headlesslaw.com/nis2/recitals/23/versions","relations_url":"https://www.headlesslaw.com/nis2/recitals/23/relations","act_url":"https://www.headlesslaw.com/nis2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"nis2","path":"/nis2/recitals","name":"NIS2","number":"Directive (EU) 2022/2555","celex":"32022L2555","title_official":null,"document_date":null},"position":{"kind":"recital","key":"23","index":23,"articles":144,"annexes":0},"prev":{"path":"/nis2/recitals/22","key":"22","title":"Recital 22"},"next":{"path":"/nis2/recitals/24","key":"24","title":"Recital 24"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/nis2/recitals.md","unit_text_sha256":"15bbe9ee9f43163600c7eb2148e2ba52b868be97457d7cfa1321c3e00afd6a60","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"nis2/recitals/rec/23","kind":"recital","key":"23","heading":"","text":"Where a sector-specific Union legal act contains provisions requiring essential or important entities to adopt cybersecurity risk-management measures or to notify significant incidents, and where those requirements are at least equivalent in effect to the obligations laid down in this Directive, those provisions, including on supervision and enforcement, should apply to such entities. If a sector-specific Union legal act does not cover all entities in a specific sector falling within the scope of this Directive, the relevant provisions of this Directive should continue to apply to the entities not covered by that act.","marks":[],"text_hash":"15bbe9ee9f43163600c7eb2148e2ba52b868be97457d7cfa1321c3e00afd6a60","revision":1,"blocks":[{"locator":"nis2/recitals/rec/23/block/1","text_hash":"15bbe9ee9f43163600c7eb2148e2ba52b868be97457d7cfa1321c3e00afd6a60","revision":1}]}}