{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2015-12-23","gaps":[],"covered":["PSD2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":11,"total":11,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/psd2/articles/95","url":"https://www.headlesslaw.com/psd2/articles/95","title":"Article 95 — Management of operational and security risks","work_id":"psd2","date_state":"current","as_of":"2026-11-11","relations_url":"https://www.headlesslaw.com/psd2/articles/95/relations"},"as_of":"2026-11-11","counts":{"refers_to:out":5,"amended_by:out":1,"refers_to:in":2,"answers:in":3},"relations":[{"edge_id":"4a30c92cc591acf23249","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 16","dst_raw":"Regulation (EU) No 1093/2010","other":null,"evidence":{"object":"eu.psd2.legal_text.article.95","source_block_id":"eu.psd2.article.95.paragraph.3","target_act":"Regulation (EU) No 1093/2010","target_celex":"32010R1093"}},{"edge_id":"ca3040ce1c4437388ff2","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 9(1)","dst_raw":"eu.emd.article.9","other":{"work_id":"emd","level":null,"locator":null,"url":null,"title":null,"key":"eu.emd.article.9","state_on_date":null},"evidence":{"object":"eu.psd2.legal_text.article.95","source_block_id":"eu.psd2.article.95.paragraph.1.point.d","target_act":"Directive 2009/110/EC","target_celex":"32009L0110"}},{"edge_id":"7499d7ebade66532ffbd","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 32(1)","dst_raw":"eu.psd2.article.32","other":{"work_id":"psd2","level":"L1","locator":"psd2/art/32","url":"/psd2/articles/32","title":"Conditions","key":"32","state_on_date":"in_force"},"evidence":{"object":"eu.psd2.legal_text.article.95","source_block_id":"eu.psd2.article.95.paragraph.1.point.c"}},{"edge_id":"9c8ed4e56295075c437b","scope":"unit","type":"amended_by","direction":"out","resolution":"external","basis":"cellar_consolidation_metadata","method":"cellar-inventory","confidence":"single_act","src_from":"2025-01-17","src_until":null,"span":null,"dst_raw":"32022L2556","other":null,"evidence":{"consolidation":"02015L2366-20250117","incorporates":["32022L2556"]}},{"edge_id":"709ed4f679e380b167ae","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 1(1)","dst_raw":"eu.psd2.article.1","other":{"work_id":"psd2","level":"L1","locator":"psd2/art/1","url":"/psd2/articles/1","title":"Subject matter","key":"1","state_on_date":"in_force"},"evidence":{"object":"eu.psd2.legal_text.article.95","source_block_id":"eu.psd2.article.95.paragraph.1.point.a"}},{"edge_id":"14af2409b4eff9b68e4b","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 33(1)","dst_raw":"eu.psd2.article.33","other":{"work_id":"psd2","level":"L1","locator":"psd2/art/33","url":"/psd2/articles/33","title":"Account information service providers","key":"33","state_on_date":"in_force"},"evidence":{"object":"eu.psd2.legal_text.article.95","source_block_id":"eu.psd2.article.95.paragraph.1.point.b"}},{"edge_id":"1db1f30ddbe63a963cba","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 95(1)","dst_raw":"eu.psd2.article.95","other":{"work_id":"psd2","level":"L1","locator":"psd2/art/5/para/1","url":"/psd2/articles/5#p-1","title":"Applications for authorisation","key":"5(1)","state_on_date":"in_force"},"evidence":{"object":"eu.psd2.legal_text.article.5","source_block_id":"eu.psd2.article.5.paragraph.1"}},{"edge_id":"ea5ee7e4d8cdc0104517","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2025-01-17","src_until":null,"span":"Article 95(3)","dst_raw":"eu.psd2.article.95","other":{"work_id":"psd2","level":"L1","locator":"psd2/art/5/para/1","url":"/psd2/articles/5#p-1","title":"Applications for authorisation","key":"5(1)","state_on_date":"in_force"},"evidence":{"object":"eu.psd2.legal_text.article.5","source_block_id":"eu.psd2.article.5.paragraph.1"}},{"edge_id":"6c0dfd1342ea399f3eae","scope":"unit","type":"answers","direction":"in","resolution":"resolved","basis":"curated_mapping","method":"stated_legal_basis","confidence":"curated","src_from":"2018-12-14","src_until":null,"span":null,"dst_raw":"eu.psd2.article.95","other":{"work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4176-operation-and-security-risk-assessment-of-a-branch-of-a","level":"L3","locator":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4176-operation-and-security-risk-assessment-of-a-branch-of-a/page","url":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4176-operation-and-security-risk-assessment-of-a-branch-of-a","title":"Q&A — Operation and security risk assessment of a branch [Final Q&A]","key":"EBA Q&A 2018_4176","state_on_date":"in_force"},"evidence":{"evidence":"legal_basis: Article 95(2) PSD2","doc_type":"qa"}},{"edge_id":"0a9ece16519745a5965d","scope":"unit","type":"answers","direction":"in","resolution":"resolved","basis":"curated_mapping","method":"stated_legal_basis","confidence":"curated","src_from":"2019-07-19","src_until":null,"span":null,"dst_raw":"eu.psd2.article.95","other":{"work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4231-responsibility-for-comprehensive-assessment-according-to","level":"L3","locator":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4231-responsibility-for-comprehensive-assessment-according-to/page","url":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4231-responsibility-for-comprehensive-assessment-according-to","title":"Q&A — Responsibility for comprehensive assessment according [Final Q&A]","key":"EBA Q&A 2018_4231","state_on_date":"in_force"},"evidence":{"evidence":"legal_basis: Article 95(2) PSD2","doc_type":"qa"}},{"edge_id":"f2ed8404b4954923c9cf","scope":"unit","type":"answers","direction":"in","resolution":"resolved","basis":"curated_mapping","method":"stated_legal_basis","confidence":"curated","src_from":"2023-01-27","src_until":null,"span":null,"dst_raw":"eu.psd2.article.95","other":{"work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2021-6156-arbitrating-between-security-and-obstacles","level":"L3","locator":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2021-6156-arbitrating-between-security-and-obstacles/page","url":"/psd2/level-3/q-and-a/eba/eba-qa-2021-6156-arbitrating-between-security-and-obstacles","title":"Q&A — Arbitrating between security and obstacles [Final Q&A]","key":"EBA Q&A 2021_6156","state_on_date":"in_force"},"evidence":{"evidence":"legal_basis: Article 95 PSD2","doc_type":"qa"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}