Article 5 - Requirements arising from other Union legislation

• Regulation (EU) 2023/203 found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

Article 5 – Requirements arising from other Union legislation Regulation (EU) 2023/203 1.       Where an organisation referred to in [Article 2](#_DxCrossRefBm1193569435)(1) complies with security requirements laid down in accordance with Article 14 of Directive (EU) 2016/1148 that are equivalent to the requirements laid down in this Regulation, compliance with those security requirements shall be considered to constitute compliance with the requirements laid down in this Regulation. 2.       Where an organisation referred to in [Article 2](#_DxCrossRefBm1193569435)(1) is an operator or an entity referred to in the national civil aviation security programmes of Member States laid down in accordance with Article 10 of Regulation (EC) No 300/2008 of the European Parliament and of the Council[[23]](#_ftn23), the cybersecurity requirements contained in point 1.7 of the Annex to Regulation (EU) 2015/1998 shall be considered to be equivalent with the requirements laid down in this Regulation, except as regards point [IS.I.OR.230](#_DxCrossRefBm1193569432) of [Annex II](#_DxCrossRefBm1193569442) to this Regulation that shall be complied with as such. 3.       Where the organisation referred to in [Article 2](#_DxCrossRefBm1193569435)(1) is the air navigation service provider of the European Geostationary Navigation Overlay Service (EGNOS) referred to in Regulation (EU) 2021/696[[24]](#_ftn24), the security requirements contained in Articles 33 to 43 of Title V of that Regulation are considered to be equivalent with the requirements laid down in this Regulation, except as regards point [IS.I.OR.230](#_DxCrossRefBm1193569432) of [Annex II](#_DxCrossRefBm1193569442) to this Regulation that shall be complied with as such. 4.       The Commission, after consulting the Agency and the Cooperation Group referred to in Article 11 of Directive (EU) 2016/1148, may issue guidelines for the assessment of the equivalence of requirements laid down in this Regulation and Directive (EU) 2016/1148. --- [[23]](#_ftnref23) Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002, OJ L 97, 9.4.2008, p. 72 [[24]](#_ftnref24) Regulation (EU) 2021/696 of the European Parliament and of the Council of 28 April 2021 establishing the Union Space Programme and the European Union Agency for the Space Programme and repealing Regulations (EU) No 912/2010, (EU) No 1285/2013 and (EU) No 377/2014 and Decision No 541/2014/EU (OJ L 170, 12.5.2021, p. 69). ## Article 5 – Requirements arising from other Union legislation *Regulation (EU) 2023/203* 1. Where an organisation referred to in [Article 2](#_DxCrossRefBm1749084166)(1) complies with security requirements laid down in accordance with Article 14 of Directive (EU) 2016/1148 that are equivalent to the requirements laid down in this Regulation, compliance with those security requirements shall be considered to constitute compliance with the requirements laid down in this Regulation. 2. Where an organisation referred to in [Article 2](#_DxCrossRefBm1749084166)(1) is an operator or an entity referred to in the national civil aviation security programmes of Member States laid down in accordance with Article 10 of Regulation (EC) No 300/2008 of the European Parliament and of the Council[[25]](#_ftn25), the cybersecurity requirements contained in point 1.7 of the Annex to Regulation (EU) 2015/1998 shall be considered to be equivalent with the requirements laid down in this Regulation, except as regards point [IS.I.OR.230](#_DxCrossRefBm1749084163) of [Annex II](#_DxCrossRefBm1749084173) to this Regulation that shall be complied with as such. 3. Where the organisation referred to in [Article 2](#_DxCrossRefBm1749084166)(1) is the air navigation service provider of the European Geostationary Navigation Overlay Service (EGNOS) referred to in Regulation (EU) 2021/696[[26]](#_ftn26), the security requirements contained in Articles 33 to 43 of Title V of that Regulation are considered to be equivalent with the requirements laid down in this Regulation, except as regards point [IS.I.OR.230](#_DxCrossRefBm1749084163) of [Annex II](#_DxCrossRefBm1749084173) to this Regulation that shall be complied with as such. 4. The Commission, after consulting the Agency and the Cooperation Group referred to in Article 11 of Directive (EU) 2016/1148, may issue guidelines for the assessment of the equivalence of requirements laid down in this Regulation and Directive (EU) 2016/1148. --- [[25]](#_ftnref25) Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002, (OJ L 97, 9.4.2008, p. 72). [[26]](#_ftnref26) Regulation (EU) 2021/696 of the European Parliament and of the Council of 28 April 2021 establishing the Union Space Programme and the European Union Agency for the Space Programme and repealing Regulations (EU) No 912/2010, (EU) No 1285/2013 and (EU) No 377/2014 and Decision No 541/2014/EU (OJ L 170, 12.5.2021, p. 69).