Source: OJ L, 2024/1772, 25.6.2024

Current language: EN

Article 12 Details of major incidents to be shared with other competent authorities


Summary What does Article 12 of the RTS on incident classification say?

This article deals with the flow of information between competent authorities and European supervisory bodies when sharing details of major incidents across Member States.

Building directly on Article 19 of DORA (Regulation (EU) 2022/2554), it establishes a clear standard for the quality and completeness of information that must be passed on: whatever is received from financial entities must be shared in full, without any alteration or anonymisation.

Important points:

  • Competent authorities and bodies such as EBA, ESMA, EIOPA, and the ECB are required to share major incident details at the same level of information as originally received from financial entities.
  • No anonymisation of incident notifications or reports is permitted when submitting these details to other competent authorities in other Member States.
  • This article reinforces the cross-border information-sharing obligations established under Article 19(6) and 19(7) of DORA.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

The details of major incidents to be submitted by competent authorities to other competent authorities in accordance with Article 19(6) of Regulation (EU) 2022/2554 and the notifications to be submitted by EBA, ESMA or EIOPA and the ECB to the relevant competent authorities in other Member States in accordance with Article 19(7) of that Regulation shall contain the same level of information, without any anonymisation, as the notifications and reports of major incidents received from financial entities in accordance with Article 19(4) of Regulation (EU) 2022/2554.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod