{
  "schema": "actproof.source_atoms.v1",
  "profile_id": "op:eu.dora.ict_incident_notification_initial.v1",
  "source_atoms": [
    {
      "source_atom_id": "src.eu.dora.32022R2554.art19.reporting_obligation",
      "source_binding_id": "sb_dora_reg_2022_2554",
      "source_id": "CELEX:32022R2554",
      "celex": "32022R2554",
      "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
      "instrument": "Regulation (EU) 2022/2554 (Digital Operational Resilience Act)",
      "authority": "European Parliament and Council of the European Union",
      "source_document_sha256": "sha256:85307f9e2a0409826dd0f54489645935816d16e929f0db4db3ef15badd11d38c",
      "atom_type": "article",
      "locator": {
        "article": "19"
      },
      "source_role": "base_obligation",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "1.   Financial entities shall report major ICT-related incidents to the relevant competent authority as referred to in Article 46 in accordance with paragraph 4 of this Article.\nWhere a financial entity is subject to supervision by more than one national competent authority referred to in Article 46, Member States shall designate a single competent authority as the relevant competent authority responsible for carrying out the functions and duties provided for in this Article.\nCredit institutions classified as significant, in accordance with Article 6(4) of Regulation (EU) No 1024/2013, shall report major ICT-related incidents to the relevant national competent authority designated in accordance with Article 4 of Directive 2013/36/EU, which shall immediately transmit that report to the ECB.\nFor the purpose of the first subparagraph, financial entities shall produce, after collecting and analysing all relevant information, the initial notification and reports referred to in paragraph 4 of this Article using the templates referred to in Article 20 and submit them to the competent authority. In the event that a technical impossibility prevents the submission of the initial notification using the template, financial entities shall notify the competent authority about it via alternative means.\nThe initial notification and reports referred to in paragraph 4 shall include all information necessary for the competent authority to determine the significance of the major ICT-related incident and assess possible cross-border impacts.\nWithout prejudice to the reporting pursuant to the first subparagraph by the financial entity to the relevant competent authority, Member States may additionally determine that some or all financial entities shall also provide the initial notification and each report referred to in paragraph 4 of this Article using the templates referred to in Article 20 to the competent authorities or the computer security incident response teams (CSIRTs) designated or established in accordance with Directive (EU) 2022/2555.",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 19 is the base DORA incident-reporting obligation for major ICT-related incidents.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:5523f32eef854c2a1690261bb8e43bcca843bc34c39c378dcd49b1a2dba7335e",
      "official_text_sha256": "sha256:72e756f2c6ef29b33f06c0fbb31a0d3908fe921d6d0d7a084a1468af2421c432",
      "binding_status": "provisional",
      "official_text_hash_basis": "sha256:utf8:actproof.official_text_normalisation.v1",
      "official_text_normalisation_basis": "actproof.official_text_normalisation.v1",
      "text_excerpt_rule_id": "actproof.official_text_excerpt_rule.v1",
      "excerpt_boundary": {
        "boundary_rule": "article_paragraph"
      },
      "official_text_source": {
        "system": "EUR-Lex",
        "celex": "32022R2554",
        "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
        "language": "en",
        "consolidation_status": "original_oj",
        "format_basis": "eurlex_html",
        "retrieval_url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng",
        "source_file": "L_2022333EN_01000101_xml.html",
        "source_file_sha256": "sha256:d4932b44d9b5aed0b02a7fb7270b9c06c9e2adf99166a132e401af6191f84114",
        "retrieved_at": "2026-06-07"
      },
      "text_language": "en",
      "text_captured_by": "maintainer",
      "text_locator": {
        "article": "19",
        "paragraph": "1"
      },
      "text_capture_status": "captured_draft",
      "text_review_status": "draft"
    },
    {
      "source_atom_id": "src.eu.dora.32022R2554.art19.p4.initial_intermediate_final",
      "source_binding_id": "sb_dora_reg_2022_2554",
      "source_id": "CELEX:32022R2554",
      "celex": "32022R2554",
      "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
      "instrument": "Regulation (EU) 2022/2554 (Digital Operational Resilience Act)",
      "authority": "European Parliament and Council of the European Union",
      "source_document_sha256": "sha256:85307f9e2a0409826dd0f54489645935816d16e929f0db4db3ef15badd11d38c",
      "atom_type": "paragraph",
      "locator": {
        "article": "19",
        "paragraph": "4"
      },
      "source_role": "reporting_sequence",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "4.   Financial entities shall, within the time limits to be laid down in accordance with Article 20, first paragraph, point (a), point (ii), submit the following to the relevant competent authority:\n(a)\nan initial notification;\n(b)\nan intermediate report after the initial notification referred to in point (a), as soon as the status of the original incident has changed significantly or the handling of the major ICT-related incident has changed based on new information available, followed, as appropriate, by updated notifications every time a relevant status update is available, as well as upon a specific request of the competent authority;\n(c)\na final report, when the root cause analysis has been completed, regardless of whether mitigation measures have already been implemented, and when the actual impact figures are available to replace estimates.",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 19(4) anchors the initial notification, intermediate report and final report sequence.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:55831936c77680f9d799e35a6c3c73b21120bfa5a011146304a1e4ba46b9042a",
      "official_text_sha256": "sha256:84749ea8cbc0bd2dd2a7a9b73745b9f4ea81e84be3b23f91e4ba3aa040fe8588",
      "binding_status": "provisional",
      "official_text_hash_basis": "sha256:utf8:actproof.official_text_normalisation.v1",
      "official_text_normalisation_basis": "actproof.official_text_normalisation.v1",
      "text_excerpt_rule_id": "actproof.official_text_excerpt_rule.v1",
      "excerpt_boundary": {
        "boundary_rule": "article_paragraph"
      },
      "official_text_source": {
        "system": "EUR-Lex",
        "celex": "32022R2554",
        "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
        "language": "en",
        "consolidation_status": "original_oj",
        "format_basis": "eurlex_html",
        "retrieval_url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng",
        "source_file": "L_2022333EN_01000101_xml.html",
        "source_file_sha256": "sha256:d4932b44d9b5aed0b02a7fb7270b9c06c9e2adf99166a132e401af6191f84114",
        "retrieved_at": "2026-06-07"
      },
      "text_language": "en",
      "text_captured_by": "maintainer",
      "text_locator": {
        "article": "19",
        "paragraph": "4"
      },
      "text_capture_status": "captured_draft",
      "text_review_status": "draft"
    },
    {
      "source_atom_id": "src.eu.dora.32022R2554.art19.competent_authority_channel",
      "source_binding_id": "sb_dora_reg_2022_2554",
      "source_id": "CELEX:32022R2554",
      "celex": "32022R2554",
      "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
      "instrument": "Regulation (EU) 2022/2554 (Digital Operational Resilience Act)",
      "authority": "European Parliament and Council of the European Union",
      "source_document_sha256": "sha256:85307f9e2a0409826dd0f54489645935816d16e929f0db4db3ef15badd11d38c",
      "atom_type": "paragraph",
      "locator": {
        "article": "19"
      },
      "source_role": "reporting_channel",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "6.   Upon receipt of the initial notification and of each report referred to in paragraph 4, the competent authority shall, in a timely manner, provide details of the major ICT-related incident to the following recipients based, as applicable, on their respective competences:\n(a)\nEBA, ESMA or EIOPA;\n(b)\nthe ECB, in the case of financial entities referred to in Article 2(1), points (a), (b) and (d);\n(c)\nthe competent authorities, single points of contact or CSIRTs designated or established in accordance with Directive (EU) 2022/2555;\n(d)\nthe resolution authorities, as referred to in Article 3 of Directive 2014/59/EU, and the Single Resolution Board (SRB) with respect to entities referred to in Article 7(2) of Regulation (EU) No 806/2014 of the European Parliament and of the Council  ( 37 ) , and with respect to entities and groups referred to in Article 7(4)(b) and (5) of Regulation (EU) No 806/2014 if such details concern incidents that pose a risk to ensuring critical functions within the meaning of Article 2(1), point (35), of Directive 2014/59/EU; and\n(e)\nother relevant public authorities under national law.",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 19 provides the competent-authority reporting context for major ICT-related incident notifications.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:5a352fa940634dd3bb0dc85211c46d74cead1b245da5ccf29ec4010d305a3179",
      "official_text_sha256": "sha256:18c2014a6baa3627a2cea1ca7254d55ec6125060e380b0ece6a2d03af2b942b7",
      "binding_status": "provisional",
      "official_text_hash_basis": "sha256:utf8:actproof.official_text_normalisation.v1",
      "official_text_normalisation_basis": "actproof.official_text_normalisation.v1",
      "text_excerpt_rule_id": "actproof.official_text_excerpt_rule.v1",
      "excerpt_boundary": {
        "boundary_rule": "article_paragraph"
      },
      "official_text_source": {
        "system": "EUR-Lex",
        "celex": "32022R2554",
        "eli": "http://data.europa.eu/eli/reg/2022/2554/oj",
        "language": "en",
        "consolidation_status": "original_oj",
        "format_basis": "eurlex_html",
        "retrieval_url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng",
        "source_file": "L_2022333EN_01000101_xml.html",
        "source_file_sha256": "sha256:d4932b44d9b5aed0b02a7fb7270b9c06c9e2adf99166a132e401af6191f84114",
        "retrieved_at": "2026-06-07"
      },
      "text_language": "en",
      "text_captured_by": "maintainer",
      "text_locator": {
        "article": "19",
        "paragraph": "6"
      },
      "text_capture_status": "captured_draft",
      "text_review_status": "draft"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0301.art1.content_rules",
      "source_binding_id": "sb_dora_reg_2025_0301",
      "source_id": "CELEX:32025R0301",
      "celex": "32025R0301",
      "eli": "http://data.europa.eu/eli/reg_del/2025/301/oj",
      "instrument": "Commission Delegated Regulation (EU) 2025/301",
      "authority": "European Commission",
      "source_document_sha256": "sha256:47a209a9f73e228e85e1dad2934d917d5791629fc98add06fc6fda0acb872dbf",
      "atom_type": "article",
      "locator": {
        "article": "1"
      },
      "source_role": "content_requirement",
      "normative_weight": "supporting",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Delegated Regulation 2025/301 sets content requirements for reports and notifications.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:b59ea406b673b8bed37dbdd123430d811e421da8364ba0ece8d9837be7a6d651",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0301.art2.initial_notification_content",
      "source_binding_id": "sb_dora_reg_2025_0301",
      "source_id": "CELEX:32025R0301",
      "celex": "32025R0301",
      "eli": "http://data.europa.eu/eli/reg_del/2025/301/oj",
      "instrument": "Commission Delegated Regulation (EU) 2025/301",
      "authority": "European Commission",
      "source_document_sha256": "sha256:47a209a9f73e228e85e1dad2934d917d5791629fc98add06fc6fda0acb872dbf",
      "atom_type": "article",
      "locator": {
        "article": "2"
      },
      "source_role": "content_requirement",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 2 provides content requirements for the initial notification.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:2adfb1967067006371705e12f843b575f3f2d7f653c21383043ee707f39bf672",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0301.art5.time_limits",
      "source_binding_id": "sb_dora_reg_2025_0301",
      "source_id": "CELEX:32025R0301",
      "celex": "32025R0301",
      "eli": "http://data.europa.eu/eli/reg_del/2025/301/oj",
      "instrument": "Commission Delegated Regulation (EU) 2025/301",
      "authority": "European Commission",
      "source_document_sha256": "sha256:47a209a9f73e228e85e1dad2934d917d5791629fc98add06fc6fda0acb872dbf",
      "atom_type": "article",
      "locator": {
        "article": "5"
      },
      "source_role": "time_limit",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 5 provides time-limit context for DORA incident-reporting stages.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:0843e55d0f7d0ad16742d2bb03fe78d5f7c01369feb054985cfaddae6af62db8",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.general_information",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_section",
      "locator": {
        "annex": "I",
        "section": "General information"
      },
      "source_role": "template_section",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Annex I contains the general information section for the reporting template.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:1046485644457d0f15fcc57aef038503c833726cf42e2692aa20206d2362929b",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.initial_notification",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_section",
      "locator": {
        "annex": "I",
        "section": "Initial notification"
      },
      "source_role": "template_section",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Annex I contains the initial-notification reporting section.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:e635f18e65202798ce0a75a5e047975108a794cbd5f3a8d69f44247226387601",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexII.data_glossary",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "glossary_entry",
      "locator": {
        "annex": "II"
      },
      "source_role": "data_glossary",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Annex II provides the data glossary and instructions for completing the template.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:dd24c0f5cd7ad1ea73df88c6775aed7f85962c32b4e75d2c0f1f9ae3f7f2aa34",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.entity_lei",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Legal entity identifier"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the financial entity legal identifier.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:b2c9094d0f6f77cd15e686f1a3db2f7f075f81f97dd316fdd1accaec5f9aa792",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.entity_name",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Name of financial entity"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the financial entity legal name.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:a0d7cb4d1bc38956a9f983b22405891f996ffb03a222e6bdcb141e4ee5ce74f7",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.financial_entity_type",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Type of financial entity"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the financial entity type/category.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:c3e6201986ace7715a69046d3dbb135445c0abe2048c8b554d17f7fc48281136",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.submission_type",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Type of report"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template/report metadata field identifying the reporting stage or submission type.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:a5d460c543dbf76d74b29ad93e41403ef0881e0f818398568b962da4bbe986c7",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.incident_reference_code",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Incident reference code"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the incident reference identifier.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:ae28fca9591f227e62f3ba61c69e19614a3bdea46647948744eb327bdeb9e609",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.detection_datetime",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Date and time of detection"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the date and time when the incident was detected.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:677501c720757559146774b3e949d5ba00d79fe868e22fb5c3fa05c7c113b29f",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.classification_datetime",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Date and time of classification"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the date and time when the incident was classified as major.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:41eae1b35a32263a7ab87a5a486d810db763c7a0923024b3bd29115225629d2f",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.classification_criteria",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Classification criteria"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field recording the incident-classification criteria triggered.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:6aedfb7e9c6e7b8b50bff55b68625d15321bdac6ea6ff5cfaabe706ab4ec9ebf",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.affected_member_states",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Affected Member States"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for Member States affected by the incident.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:5b94caea38605870f6a1e3a9fb1c2ad48e0d62f2a1333b5a2ac58718ce64f2c2",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.discovery_method",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Incident discovery method"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for how the incident was detected or discovered.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:3c99d37fab371833f1cac2d241fe5b009ba6c7415404595f74ba46e10b34e7df",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.bcp_activated",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Business continuity plan activated"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field indicating whether a business continuity plan was activated.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:17b0f5adf5e69ca45d61c8f4f035f1d28a043135f6923adbaf6bb686c4acee62",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.initial_impact_description",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Initial notification",
        "field": "Initial impact description"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the initial narrative impact description.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:4615d79f4aeb4faf6dd0b53bb80d6ebe1639d48cfd9c82fd835066661b31ade3",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.primary_contact_name",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Contact details",
        "field": "Primary contact name"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the primary contact person name.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:2b99549b67a83a681ce245104cc1a66a2350ace2927abeef7ab353f7399e2adf",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.primary_contact_email",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "Contact details",
        "field": "Primary contact email"
      },
      "source_role": "template_field",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Template field for the primary contact email address.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:d553997c15165825e522838231ed2c67ce975e50419447e669d3acb2534bb127",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32025R0302.annexI.competent_authority",
      "source_binding_id": "sb_dora_reg_2025_0302",
      "source_id": "CELEX:32025R0302",
      "celex": "32025R0302",
      "eli": "http://data.europa.eu/eli/reg_impl/2025/302/oj",
      "instrument": "Commission Implementing Regulation (EU) 2025/302",
      "authority": "European Commission",
      "source_document_sha256": "sha256:37ec431c7a11b8b30b39d1c1f0d95c39539d1c1e7236301ee3b06bb229ff009c",
      "atom_type": "template_field",
      "locator": {
        "annex": "I",
        "section": "General information",
        "field": "Competent authority"
      },
      "source_role": "template_field",
      "normative_weight": "supporting",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Operational template context for the competent authority receiving the report.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:b8367917da801a8a8f8a6cfdfae06ae3141ebb274726bf8e92419cce5575580b",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32024R1772.art1to7.classification_criteria",
      "source_binding_id": "sb_dora_reg_2024_1772",
      "source_id": "CELEX:32024R1772",
      "celex": "32024R1772",
      "eli": "http://data.europa.eu/eli/reg_del/2024/1772/oj",
      "instrument": "Commission Delegated Regulation (EU) 2024/1772",
      "authority": "European Commission",
      "source_document_sha256": "sha256:416fb104161f8b3eb0aae2601060ab869b1672cfa8452d20798800301538ceab",
      "atom_type": "classification_rule",
      "locator": {
        "articles": "1-7"
      },
      "source_role": "classification_criteria",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Articles 1 to 7 define the classification criteria used to assess ICT-related incidents.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:5d38d61205f2a92e05a0a3a8add2ca2749c6a064c779645226e23ce878a9527c",
      "official_text_sha256": null,
      "binding_status": "provisional"
    },
    {
      "source_atom_id": "src.eu.dora.32024R1772.art8.major_incident_determination",
      "source_binding_id": "sb_dora_reg_2024_1772",
      "source_id": "CELEX:32024R1772",
      "celex": "32024R1772",
      "eli": "http://data.europa.eu/eli/reg_del/2024/1772/oj",
      "instrument": "Commission Delegated Regulation (EU) 2024/1772",
      "authority": "European Commission",
      "source_document_sha256": "sha256:416fb104161f8b3eb0aae2601060ab869b1672cfa8452d20798800301538ceab",
      "atom_type": "threshold_rule",
      "locator": {
        "article": "8"
      },
      "source_role": "major_incident_threshold",
      "normative_weight": "primary",
      "language": "en",
      "text_excerpt": "",
      "atom_hash_basis": "sha256 over a canonical JSON serialisation (sorted keys) of the atom's identity fields: source_atom_id, celex, eli, atom_type, locator, source_role, normative_weight, source_document_sha256, derivation_note. Reproducible via actproof_events.source_binding.compute_source_atom_identity_hash. This is an identity hash, NOT a hash of official legal text; see official_text_sha256.",
      "derivation_note": "Article 8 provides the major-incident determination logic based on the classification criteria.",
      "review_status": "draft",
      "atom_identity_sha256": "sha256:b4d4425b08d002862fe2edde8a0b5406f676a791f2b8831ab68cb6eaf5fb6857",
      "official_text_sha256": null,
      "binding_status": "provisional"
    }
  ]
}