Artikkel 23 — Reporting obligations
Hva sier NIS2 Artikkel 23?
Kort svar, rett fra den offisielle teksten
1. Each Member State shall ensure that essential and important entities notify, without undue delay, its CSIRT or, where applicable, its competent authority in accordance with paragraph 4 of any incident that has a significant impact on the provision of their services as referred to in paragraph 3 (significant incident).
Kilde: NIS2, direktiv (EU) 2022/2555, lest 2026-08-14.
| I rettsakten | EU 2022/2555 |
| Kapittel | IV · Risikostyring for cybersikkerhet og rapporteringskrav |
| CELEX | 32022L2555 |
| Lest | 2026-08-14 |
Offisiell tekst
Lest hos EUs publikasjonskontor for dette CELEX-nummeret. Ordlyden står slik den er publisert, ingenting er skrevet om eller sammenfattet.
Teksten vises på engelsk. Norsk er ikke et offisielt EU-språk, så den offisielle ordlyden finnes ikke på norsk.
Hopp til et punkt: Punkt 1 · Punkt 2 · Punkt 3
1. Each Member State shall ensure that essential and important entities notify, without undue delay, its CSIRT or, where applicable, its competent authority in accordance with paragraph 4 of any incident that has a significant impact on the provision of their services as referred to in paragraph 3 (significant incident). Where appropriate, entities concerned shall notify, without undue delay, the recipients of their services of significant incidents that are likely to adversely affect the provision of those services. Each Member State shall ensure that those entities report, inter alia, any information enabling the CSIRT or, where applicable, the competent authority to determine any cross-border impact of the incident. The mere act of notification shall not subject the notifying entity to increased liability.
Where the entities concerned notify the competent authority of a significant incident under the first subparagraph, the Member State shall ensure that that competent authority forwards the notification to the CSIRT upon receipt.
In the case of a cross-border or cross-sectoral significant incident, Member States shall ensure that their single points of contact are provided in due time with relevant information notified in accordance with paragraph 4.
Artikkelen fortsetter i den offisielle teksten.
Andre artikler i kapitlet
Hvem gjelder dette for
Registeret navngir fem roller. Åpne en rolle for å se pliktene rettsakten legger på den, hver rad med artikkel og kilde.
Gjelder dette oss?
- Do ai governance rules apply to a cloud provider?
- Do personal data rules apply to a cloud provider?
- Do cross-border data rules apply to a cloud provider?
- Do cybersecurity rules apply to a cloud provider?
- Do health data rules apply to a cloud provider?
- Do online platforms rules apply to a cloud provider?
Alle roller i registeret · Alle spørsmål per rolle
Teksten er sitert fra den offisielle kilden og er ikke juridisk rådgivning. En nasjonal domstol leser språkversjonen som binder i sin jurisdiksjon.
Tilbake til rettsakten · EU-rettsakter, lest helt ned til nasjonal lov
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
