Source: OJ L 333, 27.12.2022, p. 1–79

Current language: EN

Recital 54 Payment-related incident reporting


This Regulation should require credit institutionsmeans a credit institution as defined in Article 4(1), point (1), of Regulation (EU) No 575/2013 of the European Parliament and of the Council(^32^);Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and amending Regulation (EU) No 648/2012 (OJ L 176, 27.6.2013, p. 1)., payment institutionsmeans a payment institution as defined in Article 4, point (4), of Directive (EU) 2015/2366;, account information service providersmeans an account information service provider as referred to in Article 33(1) of Directive (EU) 2015/2366; and electronic money institutionsmeans an electronic money institution as defined in Article 2, point (1), of Directive 2009/110/EC of the European Parliament and of the Council; to report all operational or security payment-related incidentsmeans a single event or a series of linked events unplanned by the financial entities referred to in Article 2(1), points (a) to (d), whether ICT-related or not, that has an adverse impact on the availability, authenticity, integrity or confidentiality of payment-related data, or on the payment-related services provided by the financial entity; – previously reported under Directive (EU) 2015/2366 – irrespective of the ICT nature of the incident.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod