Updated 09/05/2025
In force since 12/03/2025

Initial Legal Act
References (4)
eba.europa.eu/activities/single-rulebook/regulatory-activities/operational-resilience/joint-technical-standards
20/02/2025
Delegated Regulation 2025/301 published in OJ
17/07/2024
JC 2024 33
Final Draft published
17/07/2024
JC 2024 33
Final Draft published
17/07/2024
JC 2024 33
Final Draft published
08/12/2023
JC/2023/70
Consultation published
27/11/2023
JC/2023/70
Consultation published
27/11/2023
JC/2023/70
Consultation published
Search within this legal act
DORA ToolDelegated Regulation 2025/301

Delegated Regulation 2025/301

Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats

RecitalsArticle 1 - General information to be provided in initial notifications and intermediate and final reports on major ICT-related incidents Q&AArticle 2 - Specific information to be provided in initial notificationsArticle 3 - Specific information to be provided in intermediate reportsArticle 4 - Article Specific information to be provided in final reportsArticle 5 - Time limits for the initial notification, and for the intermediate and final reports Q&AArticle 6 - Content of the voluntary notification of significant cyber threats Q&AArticle 7 - Entry into force