Recital 23 Lex specialis of sector-specific acts


Where a sector-specific Union legal act contains provisions requiring essential or important entitiesas defined in Article 3 of Directive (EU) 2022/2555 to adopt cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures or to notify significant incidents means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555;, and where those requirements are at least equivalent in effect to the obligations laid down in this Directive, those provisions, including on supervision and enforcement, should apply to such entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations;. If a sector-specific Union legal act does not cover all entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; in a specific sector falling within the scope of this Directive, the relevant provisions of this Directive should continue to apply to the entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; not covered by that act.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod