{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/risk-impact", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/risk-impact)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-03", "fingerprint": "ewai:shared:aeaca5", "proof": "sha256:1b8aa49fab7f1b36af3ea58164546c823de9340d64a7ff3a674deeaa318b25fe", "jurisdiction": "shared", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "schema_version": "1", "id": "chain:risk-impact:dora:financial-entity", "object_type": "risk_impact", "chain": "risk → impact → obligation → case → sanction", "risk": { "id": "compliance:dora:financial-entity", "level": "medium", "score": 4, "factors": [ { "factor": "obligation_load", "points": 1, "reason": "9 skyldigheter för rollen" }, { "factor": "in_application", "points": 2, "reason": "Tillämpas sedan 2025-01-17, tillsyn kan ske nu" }, { "factor": "no_national_link", "points": 1, "reason": "Ingen svensk genomförandelag kopplad i registret" } ], "url": "https://legal.exploreworldai.com/api/public/v1/risk?id=compliance%3Adora%3Afinancial-entity" }, "impact": { "obligations": 9, "max_turnover_pct": 1, "sanction_types": [ "administrative_fine", "periodic_penalty" ], "case_law": 0 }, "obligations": [ { "obligation_id": "obligation:eu:dora-art-5-financial-entity", "article": "5", "duty": "The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-5-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-6-financial-entity", "article": "6", "duty": "Maintain a sound, comprehensive and documented ICT risk management framework.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-6-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-11-financial-entity", "article": "11", "duty": "Put in place an ICT business continuity policy with response and recovery plans.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-11-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-17-financial-entity", "article": "17", "duty": "Define and implement an ICT-related incident management process.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-17-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-19-financial-entity", "article": "19", "duty": "Report major ICT-related incidents to the competent authority.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-19-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-24-financial-entity", "article": "24", "duty": "Establish a digital operational resilience testing programme.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-24-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-26-financial-entity", "article": "26", "duty": "Carry out threat-led penetration testing where identified by the competent authority.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-26-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-28-financial-entity", "article": "28", "duty": "Manage ICT third-party risk and keep a register of information on all ICT service contracts.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-28-financial-entity" }, { "obligation_id": "obligation:eu:dora-art-30-financial-entity", "article": "30", "duty": "Include the key contractual provisions in contracts with ICT third-party service providers.", "url": "https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Adora-art-30-financial-entity" } ], "cases": { "via": "swedish_implementing_acts", "statutes": [], "total": 0, "cases": [], "coverage": "not_in_register" }, "sanctions": [ { "sanction_id": "sanction:eu:dora-art-50", "sanction_type": "administrative_fine", "authority": "Competent authority (Article 46)", "max_amount": null, "max_turnover_pct": null, "url": "https://legal.exploreworldai.com/api/public/v1/sanction-chain?id=sanction%3Aeu%3Adora-art-50" }, { "sanction_id": "sanction:eu:dora-art-35-6", "sanction_type": "periodic_penalty", "authority": "Lead Overseer (ESA)", "max_amount": null, "max_turnover_pct": 1, "url": "https://legal.exploreworldai.com/api/public/v1/sanction-chain?id=sanction%3Aeu%3Adora-art-35-6" } ], "sha256": "fb588b996916a72ca82e6c00cdf4f6f577aee4f674c61e659ce2fec891bfef3a", "hash_algorithm": "SHA-256 över id, object_type och kedjans kärna (JSON)", "updated_at": "2026-10-03", "stay_current": { "freshness": "https://legal.exploreworldai.com/api/public/v1/freshness", "cursor": "MjAyNi0wOS0xMH5zZX52aXNzZWxibGFzYXJsYWdlbg", "chain_hash": "b2e9562b24e7de637742b1660609c2d36eb107fbb6c5ca8041be4979b823290d", "changes": "https://legal.exploreworldai.com/api/public/v1/changes/cursor?after=MjAyNi0wOS0xMH5zZX52aXNzZWxibGFzYXJsYWdlbg" }, "permanent_url": "https://legal.exploreworldai.com/api/public/v1/risk-impact?id=compliance%3Adora%3Afinancial-entity", "cite_as": "Source: NovaCopilot, chain:risk-impact:dora:financial-entity, sha256 fb588b996916a72c, https://legal.exploreworldai.com/api/public/v1/risk-impact?id=compliance%3Adora%3Afinancial-entity", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "hash": "sha256:1b8aa49fab7f1b36af3ea58164546c823de9340d64a7ff3a674deeaa318b25fe", "version": "legal-2026-10-03", "expires": "2026-10-03T12:00:00.000Z", "dependency": { "index_version": "legal-2026-10-03+legal-2026-10-03+2026-10-03T09:11:15", "content_hash": "sha256:1b8aa49fab7f1b36af3ea58164546c823de9340d64a7ff3a674deeaa318b25fe", "revalidate_after": "2026-10-03T10:25:06.637Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/risk-impact", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }