{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Anis2%3Aart-20-1",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Anis2%3Aart-20-1)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-12",
    "fingerprint": "ewai:eu:57e840",
    "proof": "sha256:d5313ca20ed2a45c47740b60e1fca89cb3820cef26deb89d0daae208345ac9eb",
    "jurisdiction": "eu",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "id": "requirement:eu:nis2:art-20-1",
  "type": "requirement",
  "jurisdiction": "eu",
  "regulation": "nis2",
  "key": "art-20-1",
  "v": 1,
  "valid_from": "2024-10-18",
  "supersedes": null,
  "core": {
    "provision": "Art. 20(1)",
    "roles": [
      "management-body"
    ],
    "text": "Management bodies of essential and important entities approve the cybersecurity risk-management measures taken under Article 21, oversee their implementation and can be held liable for infringements.",
    "verbatim": false
  },
  "labels": {
    "sv": "Management body approves and oversees risk measures and can be held liable (summary)",
    "en": "Management body approves and oversees risk measures and can be held liable (summary)",
    "no": "Management body approves and oversees risk measures and can be held liable (summary)",
    "de": "Management body approves and oversees risk measures and can be held liable (summary)"
  },
  "provenance": {
    "primary_source": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj",
    "provision": "Art. 20(1)",
    "read_at": "2026-10-10",
    "method": "derived_rule",
    "review": "unreviewed"
  },
  "confidence": {
    "score": 0.6,
    "basis": [
      "register"
    ]
  },
  "node_hash": "dbfc7c6cde15388d7fe5018dc64c2724679f1aa5169cbf41fec80bbc0e4a7b1f",
  "url": "https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Anis2%3Aart-20-1",
  "access_class": "relationship",
  "graph_version": "2026-10-10.1",
  "source": "Source: NovaCopilot",
  "hash": "sha256:d5313ca20ed2a45c47740b60e1fca89cb3820cef26deb89d0daae208345ac9eb",
  "version": "legal-2026-10-12",
  "expires": "2026-10-13T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-12+legal-2026-10-12+2026-10-12T16:49:40",
    "content_hash": "sha256:d5313ca20ed2a45c47740b60e1fca89cb3820cef26deb89d0daae208345ac9eb",
    "revalidate_after": "2026-10-12T19:05:09.288Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Anis2%3Aart-20-1",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "links": 2
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_view": "public"
}