sensitive information

Definitions over time (1)

08/07/2025 – today applies on 12/11/2026 Article 1, Commission Delegated Regulation (EU) 2025/1190 Scope: Whole act

For the purposes of this Regulation, the following definitions shall apply:

‘sensitive information’ means information that can readily be leveraged to carry out attacks against the ICT systems of the financial entity, intellectual property, confidential business data, or personal data, that can directly or indirectly harm the financial entity and its ecosystem would it fall in the hands of malicious actors;