{"object_type":"card","schema_version":1,"id":"card:eu:article:dora--art-19","core":{"id":"card:eu:article:dora--art-19","subject":"eu:dora--art-19","act":"dora","article":"19","rule":[{"role":"financial-entity","duty":"Report major ICT-related incidents to the competent authority."}],"authority":{"sanctioning":["Competent authority (Article 46)","Lead Overseer (ESA)"],"supervisors":[{"name":"Finansinspektionen: Sweden","url":"https://www.fi.se/"}]},"timeline":{"in_force":"2023-01-16","applies":"2025-01-17","deadlines":[{"obligation":"obligation:eu:dora-art-19-financial-entity","hours":24,"days":null,"note":"Initial notification within 4 hours of classification and no later than 24 hours after awareness; intermediate report within 72 hours; final report within one month."}]},"provenance":{"source":"DORA: Regulation (EU) 2022/2554","source_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","eur_lex":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554","read_at":"2026-08-31"}},"core_hash":"fbed26089db422d7f1e8eff5974e008454212422b67dfaaaa80a3c86aae26daf","extended":{"outcome":"not_in_register","action_kit":[{"obligation":"obligation:eu:dora-art-19-financial-entity","provision":"dora art. 19","role":"financial-entity","action":"Report major ICT-related incidents to the competent authority.","deadline":"24 hours","recipient":"Competent authority","verification":"authority_filing","verification_method":"Filing or publication can be shown with date and recipient.","evidence":["Filed report or declaration","Submission receipt or publication URL with date"],"exceptions":["exception:eu:dora-microenterprise"],"sanctions":["sanction:eu:dora-art-35-6","sanction:eu:dora-art-50"],"related_rules":["obligation:eu:ai-act-art-73-provider","obligation:eu:gdpr-art-33-controller","obligation:eu:gdpr-art-33-processor","obligation:eu:nis2-art-23-essential-entity","obligation:eu:amlr-art-69-obliged-entity"],"source_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj"}],"timeline_dated":[],"affected_parties":[{"role":"financial-entity"}],"documentation_requirements":[{"kind":"report","role":"financial-entity","provision":"dora 19","retention":null,"obligation":"obligation:eu:dora-art-19-financial-entity"}],"risk_if_ignored":{"level":"high","sanctions":[{"id":"sanction:eu:dora-art-50","type":"administrative_fine","authority":"Competent authority (Article 46)","max_amount":"not_in_register","max_turnover_pct":"not_in_register"},{"id":"sanction:eu:dora-art-35-6","type":"periodic_penalty","authority":"Lead Overseer (ESA)","max_amount":"not_in_register","max_turnover_pct":1}]},"related_rules":["card:eu:article:dora--art-11","card:eu:article:dora--art-17","card:eu:article:dora--art-24","card:eu:article:dora--art-26","card:eu:article:dora--art-28","card:eu:article:dora--art-30","card:eu:article:dora--art-5","card:eu:article:dora--art-6","card:eu:article:dora--art-12","card:eu:article:dora--art-16"],"related_cases":"not_in_register","precedent":"not_in_register","comparison_objects":"not_in_register","change_history":[{"day":"2026-08-31","type":"rechecked","event":"Raden läst mot EUR-Lex utan ändring","hash_after":"642f67c5650eb3a5"},{"day":"2025-01-17","type":"changed","event":"Rättsakten började tillämpas","hash_after":"642f67c5650eb3a5"},{"day":"2023-01-16","type":"added","event":"Rättsakten trädde i kraft enligt CELEX 32022R2554","hash_after":"642f67c5650eb3a5"}]},"links":[{"id":"obligation:eu:dora-art-19-financial-entity","type":"obligation","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:dora-art-19-financial-entity"},{"id":"sanction:eu:dora-art-35-6","type":"sanction","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:dora-art-35-6"},{"id":"sanction:eu:dora-art-50","type":"sanction","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:dora-art-50"},{"id":"authority:eu:competent-authority-article-46","type":"authority","url":"https://legal.exploreworldai.com/api/public/v1/obj/authority/eu:competent-authority-article-46"},{"id":"authority:eu:lead-overseer-esa","type":"authority","url":"https://legal.exploreworldai.com/api/public/v1/obj/authority/eu:lead-overseer-esa"},{"id":"action_kit:eu:dora--art-19","type":"action_kit","url":"https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-19"},{"id":"card:eu:article:ai-act--art-73","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:ai-act--art-73"},{"id":"card:eu:article:amlr--art-69","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:amlr--art-69"},{"id":"card:eu:article:dora--art-11","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:dora--art-11"},{"id":"card:eu:article:dora--art-12","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:dora--art-12"}],"link_count":{"total":23,"public":10,"meets_target":true},"next_questions":{"items":[{"question":"What does Article 73 AI-ACT require?","card":"card:eu:article:ai-act--art-73","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:ai-act--art-73&view=compact"},{"question":"What does Article 69 AMLR require?","card":"card:eu:article:amlr--art-69","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:amlr--art-69&view=compact"},{"question":"What does Article 11 DORA require?","card":"card:eu:article:dora--art-11","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:dora--art-11&view=compact"},{"question":"What does Article 12 DORA require?","card":"card:eu:article:dora--art-12","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:dora--art-12&view=compact"},{"question":"What does Article 16 DORA require?","card":"card:eu:article:dora--art-16","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:dora--art-16&view=compact"}],"count":5,"meets_target":true},"method":"Composed with fixed rules from the obligation, sanction, action kit, timeline, documentation, outcome, judgment reference, national implementation and change journal registers. Missing fields are not_in_register.","attribution":"Source: NovaCopilot","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/card","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"links_full":23},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-04T05:26:10.675Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/card?id=card%3Aeu%3Aarticle%3Adora--art-19","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":2242}}