{
  "url": "https://openlegislation.uk/eu-regulation-2018-573/article-10",
  "json_url": "https://openlegislation.uk/eu-regulation-2018-573/article-10.json",
  "legislation": "eur/2018/573",
  "legislation_title": "Commission Delegated Regulation (EU) 2018/573 of 15 December 2017 on key elements of data storage contracts to be concluded as part of a traceability system for tobacco products (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2018-573",
  "path": "article/10",
  "kind": "article",
  "number": "10",
  "heading": "Information security management",
  "text": "The contract shall require providers to declare that the primary repository and, where applicable, the second repository, is managed in accordance with internationally recognised information security management standards. Providers certified to ISO/IEC 27001:2013 shall be presumed to meet those standards.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2018/573/article/10",
    "retrieved_at": "2026-11-01T14:44:11.920260+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}