Skip to content

GlobalLawDBby GenieAI

Laws Search Sanctions Map Data Developers

Search the text of the law

Log in Get an API key

Laws Search Sanctions Map Data Developers

Log in Get an API key

The Global Law Database. Free to read, built for people and AI agents.

Explore

All laws
Search the text
Sanctions
Map of connections
Compare UK and EU

Developers

AI agents (MCP)
REST API
Bulk data
API keys

Coverage

United Kingdom
European Union
United States
Canada
Australia
France
Germany
Netherlands
Spain
Austria
Norway
Finland
Switzerland
Ireland

GlobalLawDB is made by GenieAI, London. It is not legal advice: check the official text before relying on it. Text comes from official publishers under their licences, listed on the Data page.

ThemeMatch my systemLightDark

European Union
Commission Implementing Regulation (EU) 2023/203
Article 2
3a.

Commission Implementing Regulation (EU) 2023/203

In forceThis text since 22 Feb 2026law://eu/reg/2023/203/art_2__para_3a@2026-11-10

Version in force onWhereEuropean Union

Contents

1. This Regulation applies to the following organisations:2 changes
2. This Regulation applies to the competent authorities, incl…
3. This Regulation also applies to the competent authority re…
3a. This Regulation also applies to the competent authority de…1 change
4. This Regulation is without prejudice to information securi…

Contents

1. This Regulation applies to the following organisations:2 changes
2. This Regulation applies to the competent authorities, incl…
3. This Regulation also applies to the competent authority re…
3a. This Regulation also applies to the competent authority de…1 change
4. This Regulation is without prejudice to information securi…

3a.This Regulation also applies to the competent authority designated in accordance with Annex I (Part-AR.UAS) to Commission Implementing Regulation (EU) 2024/1109^note.

Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.

Key facts

Type: Implementing regulation · Commission Implementing Regulation (EU) 2023/203
Adopted: 27 Oct 2022
In force: 22 Feb 2023
Applies from: 1 Jan 2026
Text current to: 22 Feb 2026
Applies from: 22 Feb 2026
Made by: Directorate-General for Mobility and Transport, European Commission
Official: EUR-Lex 32023R0203 · ELI

Topics

air safety air traffic application of EU law civil aviation crew information security maintenance organisation provision of services risk management vocational training Transport

History · 1 version

22 Feb 2026Reading
changed by Commission Implementing Regulation (EU) 2024/1109

Connections

Amended by 1: Commission Implementing Regulation (EU) 2024/1109
Cited by 1: this act25 provisions
Cites 1: Commission Implementing Regulation (EU) 2024/1109

Defined terms · 6

Show every defined term

incident
means any event having an actual adverse effect on the security of network and information systems as defined in Article 4(7) of Directive (EU) 2016/1148;
information security
means the preservation of confidentiality, integrity, authenticity and availability of network and information systems;
information security event
means an identified occurrence of a system, service or network state indicating a possible breach of the information security policy or failure of information security controls, or a previously unknown situation that can be relevant for information security;
information security risk
means the risk to organisational civil aviation operations, assets, individuals, and other organisations due to the potential of an information security event.
threat
means a potential violation of information security which exists when there is an entity, circumstance, action or event that could cause harm;
vulnerability
means a flaw or weakness in an asset or a system, procedures, design, implementation, or information security measures that could be exploited and results in a breach or violation of the information security policy.

eu/reg/2023/203