art_9__para_3

Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (Text with EEA relevance) · European Union

3. In order to achieve the objectives referred to in paragraph 2, financial entities shall use ICT solutions and processes that are appropriate in accordance with Article 4. Those ICT solutions and processes shall: ensure the security of the means of transfer of data; minimise the risk of corruption or loss of data, unauthorised access and technical flaws that may hinder business activity; prevent the lack of availability, the impairment of the authenticity and integrity, the breaches of confidentiality and the loss of data; ensure that data is protected from risks arising from data management, including poor administration, processing-related risks and human error.

← art_9__para_2 · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-12 · Text as adopted (Official Journal); later amendments are not incorporated in this text.