Amendment 288· DORA Article 19

Tracker noteThe amendment names this article, but which paragraph or point it changes has not been automatically established, so it is not yet linked to a specific point.

Wording it would delete

Article 8 Amendments to Regulation (EU) 2022/2554 Article 19 of Regulation (EU) 2022/2554 is amended as follows: 1. in paragraph 1, the first subparagraph is replaced by the following: ‘Financial entities shall report major ICT-related incidents to the relevant competent authority as referred to in Article 46 via the single-entry point established pursuant to Article 23a of Directive (EU) 2022/2555 in accordance with paragraph 4 of this Article. ‘Financial entities may, on a voluntary basis, notify via the single-entry point established pursuant to Article 23a of Directive (EU) 2022/2555 significant cyber threats to the relevant competent authority when they deem the threat to be of relevance to the financial system, service users or clients. The relevant competent authority may provide such information to other relevant authorities referred to in paragraph 6.

Struck CommissionHighlighted amendment