Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (c. 1148)

1. Introductory Text

2. CHAPTER I GENERAL PROVISIONS

   1. Article 1. Subject matter and scope

   2. Article 2. Processing of personal data

   3. Article 3. Minimum harmonisation

   4. Article 4. Definitions

   5. Article 5. Identification of operators of essential services

   6. Article 6. Significant disruptive effect

3. CHAPTER II NATIONAL FRAMEWORKS ON THE SECURITY OF NETWORK AND INFORMATION SYSTEMS

   1. Article 7. National strategy on the security of network and information systems

   2. Article 8. National competent authorities and single point of contact

   3. Article 9. Computer security incident response teams (CSIRTs)

   4. Article 10. Cooperation at national level

4. CHAPTER III COOPERATION

   1. Article 11. Cooperation Group

   2. Article 12. CSIRTs network

   3. Article 13. International cooperation

5. CHAPTER IV SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF OPERATORS OF ESSENTIAL SERVICES

   1. Article 14. Security requirements and incident notification

   2. Article 15. Implementation and enforcement

6. CHAPTER V SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF DIGITAL SERVICE PROVIDERS

   1. Article 16. Security requirements and incident notification

   2. Article 17. Implementation and enforcement

   3. Article 18. Jurisdiction and territoriality

7. CHAPTER VI STANDARDISATION AND VOLUNTARY NOTIFICATION

   1. Article 19. Standardisation

   2. Article 20. Voluntary notification

8. CHAPTER VII FINAL PROVISIONS

   1. Article 21. Penalties

   2. Article 22. Committee procedure

   3. Article 23. Review

   4. Article 24. Transitional measures

   5. Article 25. Transposition

   6. Article 26. Entry into force

   7. Article 27. Addressees

9. Signature

10. 1. ANNEX I

       REQUIREMENTS AND TASKS OF COMPUTER SECURITY INCIDENT RESPONSE TEAMS (CSIRTs)

       1. The requirements and tasks of CSIRTs shall be adequately and...

       2. Requirements for CSIRTs: CSIRTs shall ensure a high level of...

    2. ANNEX II

       TYPES OF ENTITIES FOR THE PURPOSES OF POINT (4) OF ARTICLE 4

    3. ANNEX III

       TYPES OF DIGITAL SERVICES FOR THE PURPOSES OF POINT (5) OF ARTICLE 4

       1. Online marketplace. Online search engine. Cloud computing service.