- Latest available (Revised)
- Original (As made)
The Network and Information Systems Regulations 2018
You are here:
- UK Statutory Instruments
- 2018 No. 506
- PART 3
- Regulation 8
What Version
Advanced Features
- Show Geographical Extent(e.g. England, Wales, Scotland and Northern Ireland)
- Show Timeline of Changes
More Resources
Changes over time for: Section 8
Changes to legislation:
There are currently no known outstanding effects for the The Network and Information Systems Regulations 2018, Section 8.
Changes to Legislation
Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.
Identification of operators of essential servicesU.K.
This section has no associated Explanatory Memorandum
8.—(1) If a person provides an essential service of a kind referred to in F1... Schedule 2 and that service—
(a)relies on network and information systems; and
(b)satisfies a threshold requirement described for that kind of essential service,
that person is deemed to be designated as an OES for the subsector that is specified with respect to that essential service in that Schedule.
[F2(1A) Paragraph (1) does not apply to a network provider or service provider who is subject to the requirements of sections 105A to 105C of the Communications Act 2003 and in this paragraph “network provider” and “service provider” have the meanings given in section 105A(5) of that Act.]
(2) A person who falls within paragraph (1) must notify the designated competent authority [F3in writing] of that fact before the notification date.
[F4(2A) Each integrated care board is deemed to be designated as an OES for the healthcare settings subsector and, in relation to an integrated care board, any services provided by it (including the making of arrangements for the provision of services by others) are deemed to be essential services.]
(3) Even if a person does not meet the threshold requirement mentioned in paragraph (1)(b), a competent authority may designate that person as an OES for the subsector in relation to which that competent authority is designated under regulation 3(1), if the following conditions are met—
(a)that person provides an essential service of a kind specified in F5... Schedule 2 for the subsector in relation to which the competent authority is designated under regulation 3(1);
(b)the provision of that essential service by that person relies on network and information systems; and
(c)the competent authority concludes that an incident affecting the provision of that essential service by that person is likely to have significant disruptive effects on the provision of the essential service.
(4) In order to arrive at the conclusion mentioned in paragraph (3)(c), the competent authority must have regard to the following factors—
(a)the number of users relying on the service provided by the person;
(b)the degree of dependency of the other relevant sectors on the service provided by that person;
(c)the likely impact of incidents on the essential service provided by that person, in terms of its degree and duration, on economic and societal activities or public safety;
(d)the market share of the essential service provided by that person;
(e)the geographical area that may be affected if an incident impacts on the service provided by that person;
(f)the importance of the provision of the service by that person for maintaining a sufficient level of that service, taking into account the availability of alternative means of essential service provision;
(g)the likely consequences for national security if an incident impacts on the service provided by that person; and
(h)any other factor the competent authority considers appropriate to have regard to, in order to arrive at a conclusion under this paragraph.
(5) A competent authority must designate an OES under paragraph (3) by notice in writing served on the person who is to be designated and provide reasons for the designation in the notice.
(6) Before a competent authority designates a person as an OES under paragraph (3), the authority may—
F6(a). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(b)invite the person to submit any written representations about the proposed decision to designate it as an OES.
F7(7) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
[F8(7A) If a person has reasonable grounds to believe that they no longer fall within paragraph (1) or that the conditions for designation under paragraph (3) are no longer met in relation to them, they must as soon as practicable notify the designated competent authority in writing and provide with that notification evidence supporting that belief.
(7B) A competent authority that receives from a person a notification and supporting evidence referred to in paragraph (7A) must have regard to that notification and evidence in considering whether to revoke that person’s designation.]
(8) A competent authority must maintain a list of all the persons who are deemed to be designated under paragraph (1) [F9or (2A)] or designated under paragraph (3) for the subsectors in relation to which that competent authority is designated under regulation 3(1).
(9) The competent authority must review the list mentioned in paragraph (8) at regular intervals and in accordance with paragraph (10).
(10) The first review under paragraph (9) must take place before 9th May 2020, and subsequent reviews must take place, at least, biennially.
(11) In this regulation [F10the “notification date” means]—
(a)10th August 2018, in the case of a person who falls within paragraph (1) on the date these Regulations come into force; or
(b)in any other case, the date three months after the date on which the person falls within that paragraph.
Textual Amendments
F1Words in reg. 8(1) omitted (20.6.2018) by virtue of The Network and Information Systems (Amendment) Regulations 2018 (S.I. 2018/629), regs. 1, 2(5)
F2Reg. 8(1A) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 5(a) (with reg. 21)
F3Words in reg. 8(2) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 5(b) (with reg. 21)
F4Reg. 8(2A) inserted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 4 para. 237(2); S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)
F5Words in reg. 8(3)(a) omitted (20.6.2018) by virtue of The Network and Information Systems (Amendment) Regulations 2018 (S.I. 2018/629), regs. 1, 2(5)
F6Reg. 8(6)(a) and word omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 5(c) (with reg. 21)
F7Reg. 8(7) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 8; 2020 c. 1, Sch. 5 para. 1(1)
F8Reg. 8(7A)(7B) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 5(d) (with reg. 21)
F9Words in reg. 8(8) inserted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 4 para. 237(3); S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)
F10Words in reg. 8(11) substituted (20.6.2018) by The Network and Information Systems (Amendment) Regulations 2018 (S.I. 2018/629), regs. 1, 2(6)
Options/Help
Print Options
PrintThe Whole Instrument
PrintThe Whole Part
PrintThis Section only
Legislation is available in different versions:
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
See additional information alongside the content
Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Opening Options
Different options to open legislation in order to view more content on screen at once
Explanatory Memorandum
Explanatory Memorandum sets out a brief statement of the purpose of a Statutory Instrument and provides information about its policy objective and policy implications. They aim to make the Statutory Instrument accessible to readers who are not legally qualified and accompany any Statutory Instrument or Draft Statutory Instrument laid before Parliament from June 2004 onwards.
More Resources
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
- the original print PDF of the as enacted version that was used for the print copy
- lists of changes made by and/or affecting this legislation item
- confers power and blanket amendment details
- all formats of all associated documents
- correction slips
- links to related legislation and further information resources
Impact Assessments
Impact Assessments generally accompany all UK Government interventions of a regulatory nature that affect the private sector, civil society organisations and public services. They apply regardless of whether the regulation originates from a domestic or international source and can accompany primary (Acts etc) and secondary legislation (SIs). An Impact Assessment allows those with an interest in the policy area to understand:
- Why the government is proposing to intervene;
- The main options the government is considering, and which one is preferred;
- How and to what extent new policies may impact on them; and,
- The estimated costs and benefits of proposed measures.
Timeline of Changes
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
More Resources
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
- the original print PDF of the as made version that was used for the print copy
- correction slips
Click 'View More' or select 'More Resources' tab for additional information including:
- lists of changes made by and/or affecting this legislation item
- confers power and blanket amendment details
- all formats of all associated documents
- links to related legislation and further information resources
All content is available under the Open Government Licence v3.0 except where otherwise stated. This site additionally contains content derived from EUR-Lex, reused under the terms of the Commission Decision 2011/833/EU on the reuse of documents from the EU institutions. For more information see the EUR-Lex public statement on re-use.