{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/recitals/60","url":"https://www.headlesslaw.com/nis2/recitals/60","title":"Recital 60","family":"l1_recital_view","work_id":"nis2","view_of":"/nis2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Directive (EU) 2022/2555, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","valid_from":"2022-12-27","valid_until":null,"content_id":"b98dd8e9d0856ed8","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/recitals/60/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/recitals/60/versions/2022-12-27/rev/b98dd8e9d0856ed8","versions_url":"https://www.headlesslaw.com/nis2/recitals/60/versions","relations_url":"https://www.headlesslaw.com/nis2/recitals/60/relations","act_url":"https://www.headlesslaw.com/nis2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"nis2","path":"/nis2/recitals","name":"NIS2","number":"Directive (EU) 2022/2555","celex":"32022L2555","title_official":null,"document_date":null},"position":{"kind":"recital","key":"60","index":60,"articles":144,"annexes":0},"prev":{"path":"/nis2/recitals/59","key":"59","title":"Recital 59"},"next":{"path":"/nis2/recitals/61","key":"61","title":"Recital 61"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/nis2/recitals.md","unit_text_sha256":"71393f6d086cd1bf1e5dddf0a5cebe9884c2e5d7798c215a962fc4436a297fc0","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"nis2/recitals/rec/60","kind":"recital","key":"60","heading":"","text":"Member States, in cooperation with ENISA, should take measures to facilitate coordinated vulnerability disclosure by establishing a relevant national policy. As part of their national policy, Member States should aim to address, to the extent possible, the challenges faced by vulnerability researchers, including their potential exposure to criminal liability, in accordance with national law. Given that natural and legal persons researching vulnerabilities could in some Member States be exposed to criminal and civil liability, Member States are encouraged to adopt guidelines as regards the non-prosecution of information security researchers and an exemption from civil liability for their activities.","marks":[],"text_hash":"71393f6d086cd1bf1e5dddf0a5cebe9884c2e5d7798c215a962fc4436a297fc0","revision":1,"blocks":[{"locator":"nis2/recitals/rec/60/block/1","text_hash":"71393f6d086cd1bf1e5dddf0a5cebe9884c2e5d7798c215a962fc4436a297fc0","revision":1}]}}