{
  "url": "https://openlegislation.uk/eu-decision-2007-7/annex-II/article-18",
  "json_url": "https://openlegislation.uk/eu-decision-2007-7/annex-II/article-18.json",
  "legislation": "eudn/2007/7",
  "legislation_title": "Decision of the European Central Bank of 24 July 2007 concerning the terms and conditions of TARGET2-ECB (ECB/2007/7) (2007/601/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2007-7",
  "path": "annex/II/article/18",
  "kind": "article",
  "number": "18",
  "heading": "Security requirements",
  "text": "1. T2S DCA holders shall implement adequate security controls to protect their systems from unauthorised access and use. T2S DCA holders shall be exclusively responsible for the adequate protection of the confidentiality, integrity and availability of their systems.\n2. T2S DCA holders shall inform the ECB of any security-related incidents in their technical infrastructure and, where appropriate, security-related incidents that occur in the technical infrastructure of the third party providers. The ECB may request further information about the incident and, if necessary, request that the T2S DCA holders take appropriate measures to prevent a recurrence of such an event.\n3 . The ECB may impose additional security requirements, in particular with regard to cybersecurity or the prevention of fraud, on all T2S DCA holders and/or on T2S DCA holders that are considered critical by the ECB.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Inserted by Decision (EU) 2015/929 of the European Central Bank of 26 May 2015 amending Decision ECB/2007/7 concerning the terms and conditions of TARGET2-ECB (ECB/2015/22)."
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Substituted by Decision (EU) 2018/1625 of the European Central Bank of 8 October 2018 amending Decision ECB/2007/7 concerning the terms and conditions of TARGET2-ECB (ECB/2018/24)."
    },
    {
      "type": "F",
      "label": "F3",
      "text": "Substituted by Decision (EU) 2019/1848 of the European Central Bank of 29 October 2019 amending Decision ECB/2007/7 concerning the terms and conditions of TARGET2-ECB (ECB/2019/32)."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2007/7/annex/II/article/18",
    "retrieved_at": "2026-11-01T15:17:18.350563+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}