Regulatory framework

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework

amending Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine

amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine

implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine

implementing Regulation (EU) 2024/1428 amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine

implementing Regulation (EU) 2019/796 concerning restrictive measures against cyberattacks threatening the Union or its Member States

on the mechanisms to be put in place by Member States for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending Directive(EU) 2019/1937, and amending and repealing Directive (EU) 2015/849 (Text with EEA relevance)

on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing (Text with EEA relevance)

establishing the Authority for Anti-Money Laundering and Countering the Financing of Terrorism and amending Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010 (Text with EEA relevance)

amending Directive (EU) 2019/1153 as regards access by competent authorities to centralised bank account registries through the interconnection system and technical measures to facilitate the use of transaction records

implementing Regulation (EU) 2017/1509 concerning restrictive measures against the Democratic People’s Republic of Korea

implementing Regulation (EU) 2023/1529 concerning restrictive measures in view of Iran’s military support to Russia’s war of aggression against Ukraine and to armed groups and entities in the Middle East and the Red Sea region

supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council by specifying certain criteria for classifying asset-referenced tokens and e-money tokens as significant

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by specifying the criteria for the designation of ICT third-party service providers as critical for financial entities

supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council by specifying the procedural rules for the exercise of the power to impose fines or periodic penalty payments by the European Banking Authority on issuers of significant asset-referenced tokens and issuers of significant e-money tokens

supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council by specifying the fees charged by the European Banking Authority to issuers of significant asset-referenced tokens and issuers of significant e-money tokens

supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council by specifying the criteria and factors to be taken into account by the European Securities Markets Authority, the European Banking Authority and competent authorities in relation to their intervention powers

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by determining the amount of the oversight fees to be charged by the Lead Overseer to critical ICT third-party service providers and the way in which those fees are to be paid