art_23__para_3

Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) (Text with EEA relevance) · European Union

3. An incident shall be considered to be significant if: it has caused or is capable of causing severe operational disruption of the services or financial loss for the entity concerned; it has affected or is capable of affecting other natural or legal persons by causing considerable material or non-material damage.

← art_23__para_2 · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-27 · Text as adopted (Official Journal); later amendments are not incorporated in this text.