{
  "publisher": "ClevSec (https://clevsec.one)",
  "license": {
    "name": "CC BY 4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "disclaimer": "For informational purposes only; not legal advice. Check the cited sources and your national law.",
  "changelog": "https://clevsec.one/data/changelog.json",
  "datasets": [
    {
      "id": "reporting-deadlines",
      "title": "EU incident and breach reporting deadlines (GDPR, NIS2, DORA, CRA)",
      "description": "When each reporting clock starts, the deadlines, and who receives the reports.",
      "url": "https://clevsec.one/data/reporting-deadlines.json",
      "human_readable": "https://clevsec.one/blog/nis2-incident-reporting/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "dora-major-incident-criteria",
      "title": "DORA major ICT-related incident classification",
      "description": "The gate test, materiality thresholds and decision rule of Commission Delegated Regulation (EU) 2024/1772.",
      "url": "https://clevsec.one/data/dora-major-incident-criteria.json",
      "human_readable": "https://clevsec.one/blog/dora-major-incident-classification/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "dora-checklist",
      "title": "DORA compliance checklist: 59 requirements by article",
      "description": "Core DORA requirements for financial entities with article references and the scope exemptions stated in the regulation.",
      "url": "https://clevsec.one/data/dora-checklist.json",
      "human_readable": "https://clevsec.one/blog/dora-compliance-guide/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "nis2-measures",
      "title": "NIS2 minimum cybersecurity risk-management measures (Article 21(2))",
      "description": "The ten measures every essential and important entity must include, plus the related governance and reporting duties.",
      "url": "https://clevsec.one/data/nis2-measures.json",
      "human_readable": "https://clevsec.one/blog/nis2-compliance-checklist/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "nis2-scope",
      "title": "NIS2 scope: sectors, size rule and size-independent cases",
      "description": "Annex I and II sectors, the medium-size rule, the cases covered regardless of size, and the essential/important categories.",
      "url": "https://clevsec.one/data/nis2-scope.json",
      "human_readable": "https://clevsec.one/blog/does-nis2-apply-to-my-company/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "gdpr-fines",
      "title": "GDPR fine tiers and the EDPB calculation bands",
      "description": "Article 83 maximums and the starting-point bands and turnover adjustments of EDPB Guidelines 04/2022.",
      "url": "https://clevsec.one/data/gdpr-fines.json",
      "human_readable": "https://clevsec.one/blog/how-gdpr-fines-are-calculated/?ref=agent",
      "verified": "2026-10-19"
    },
    {
      "id": "gdpr-transparency-items",
      "title": "Information a GDPR privacy notice must contain (Articles 13 and 14)",
      "description": "Each required item with its article in Art. 13 (data collected from the person) and Art. 14 (data from other sources).",
      "url": "https://clevsec.one/data/gdpr-transparency-items.json",
      "human_readable": "https://clevsec.one/blog/gdpr-privacy-policy-requirements/?ref=agent",
      "verified": "2026-10-19"
    }
  ]
}