Annex Sectors, subsectors and categories of entities


Sectors

Subsectors

Categories of entities

  • Energy

  • Electricity

  • Electricity undertakings as defined in Article 2, point (57), of Directive (EU) 2019/944 of the European Parliament and of the Council(^1^), which carry out the function of ‘supply’ as defined in Article 2, point (12), of that Directive

  • Distribution system operators as defined in Article 2, point (29), of Directive (EU) 2019/944

  • Transmission system operators as defined in Article 2, point (35), of Directive (EU) 2019/944

  • Producers as defined in Article 2, point (38), of Directive (EU) 2019/944

  • Nominated electricity market operators as defined in Article 2, point (8), of Regulation (EU) 2019/943 of the European Parliament and of the Council(^2^)

  • Market participants as defined in Article 2, point (25), of Regulation (EU) 2019/943 providing aggregation, demand response or energy storage services as defined in Article 2, points (18), (20) and (59), of Directive (EU) 2019/944

  • District heating and cooling

  • Operators of district heating or district cooling as defined in Article 2, point (19), of Directive (EU) 2018/2001 of the European Parliament and of the Council(^3^)

  • Oil

  • Operators of oil transmission pipelines

  • Operators of oil production, refining and treatment facilities, storage and transmission

  • Central stockholding entities as defined in Article 2, point (f), of Council Directive 2009/119/EC(^4^)

  • Gas

  • Supply undertakings as defined in Article 2, point (8), of Directive 2009/73/EC of the European Parliament and of the Council(^5^)

  • Distribution system operators as defined in Article 2, point (6), of Directive 2009/73/EC

  • Transmission system operators as defined in Article 2, point (4), of Directive 2009/73/EC

  • Storage system operators as defined in Article 2, point (10), of Directive 2009/73/EC

  • LNG system operators as defined in Article 2, point (12), of Directive 2009/73/EC

  • Natural gas undertakings as defined in Article 2, point (1), of Directive 2009/73/EC

  • Operators of natural gas refining and treatment facilities

  • Hydrogen

  • Operators of hydrogen production, storage and transmission

  • Transport

  • Air

  • Air carriers as defined in Article 3, point (4), of Regulation (EC) No 300/2008 used for commercial purposes

  • Airport managing bodies as defined in Article 2, point (2), of Directive 2009/12/EC of the European Parliament and of the Council(^6^), airports as defined in Article 2, point (1), of that Directive, including the core airports listed in Section 2 of Annex II to Regulation (EU) No 1315/2013 of the European Parliament and of the Council(^7^), and entities operating ancillary installations contained within airports

  • Traffic management control operators providing air traffic control (ATC) services as defined in Article 2, point (1), of Regulation (EC) No 549/2004 of the European Parliament and of the Council(^8^)

  • Rail

  • Infrastructure managers as defined in Article 3, point (2), of Directive 2012/34/EU of the European Parliament and of the Council(^9^)

  • Railway undertakings as defined in Article 3, point (1), of Directive 2012/34/EU and operators of service facilities as defined in Article 3, point (12), of that Directive

  • Water

  • Inland, sea and coastal passenger and freight water transport companies, as defined for maritime transport in Annex I to Regulation (EC) No 725/2004, not including the individual vessels operated by those companies

  • Managing bodies of ports as defined in Article 3, point (1), of Directive 2005/65/EC, including their port facilities as defined in Article 2, point (11), of Regulation (EC) No 725/2004, and entities operating works and equipment contained within ports

  • Operators of vessel traffic services (VTS) as defined in Article 3, point (o), of Directive 2002/59/EC of the European Parliament and of the Council(^10^)

  • Road

  • Road authorities as defined in Article 2, point (12), of Commission Delegated Regulation (EU) 2015/962(^11^) responsible for traffic management control, excluding public entities for whom traffic-management or the operation of intelligent transport systems is a non-essential part of their general activity

  • Operators of Intelligent Transport Systems as defined in Article 4, point (1), of Directive 2010/40/EU of the European Parliament and of the Council(^12^)

  • public transport

  • Public service operators as defined in Article 2, point (d), of Regulation (EC) No 1370/2007 of the European Parliament and of the Council(^13^)

  • Banking

  • Credit institutions as defined in Article 4, point (1), of Regulation (EU) No 575/2013

  • Financial market infrastructure

  • Operators of trading venues as defined in Article 4, point (24), of Directive 2014/65/EU

  • Central counterparties (CCPs) as defined in Article 2, point (1), of Regulation (EU) No 648/2012

  • Health

  • Healthcare providers as defined in Article 3, point (g), of Directive 2011/24/EU of the European Parliament and of the Council(^14^)

  • EU reference laboratories as referred to in Article 15 of Regulation (EU) 2022/2371 of the European Parliament and of the Council(^15^)

  • Entities carrying out research and development activities of medicinal products as defined in Article 1, point (2), of Directive 2001/83/EC of the European Parliament and of the Council(^16^)

  • Entities manufacturing basic pharmaceutical products and pharmaceutical preparations as referred to in Section C division 21 of NACE Rev. 2

  • Entities manufacturing medical devices considered as critical during a public health emergency (‘public health emergency critical devices list’) within the meaning of Article 22 of Regulation (EU) 2022/123 of the European Parliament and of the Council(^17^)

  • Entities holding a distribution authorisation as referred to in Article 79 of Directive 2001/83/EC

  • Drinking water

  • Suppliers and distributors of water intended for human consumption as defined in Article 2, point (1)(a), of Directive (EU) 2020/2184 of the European Parliament and of the Council(^18^), excluding distributors for which distribution of water for human consumption is a non-essential part of their general activity of distributing other commodities and goods

  • Waste water

  • Undertakings collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water as defined in Article 2, points (1), (2) and (3), of Council Directive 91/271/EEC(^19^), excluding undertakings for which collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water is a non-essential part of their general activity

  • Digital infrastructure

  • Providers of internet exchange points as defined in Article 6, point (18), of Directive (EU) 2022/2555

  • DNS service providers as defined in Article 6, point (20), of Directive (EU) 2022/2555, excluding operators of root name servers

  • top-level-domain name registries as defined in Article 6, point (21), of Directive (EU) 2022/2555

  • Providers of cloud computing services as defined in Article 6, point (30), of Directive (EU) 2022/2555

  • Providers of data centre services as defined in Article 6, point (31), of Directive (EU) 2022/2555

  • Providers of content delivery networks as defined in Article 6, point (32), of Directive (EU) 2022/2555

  • Trust service providers as defined in Article 3, point (19), of Regulation (EU) No 910/2014 of the European Parliament and of the Council(^20^)

  • Providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972 of the European Parliament and of the Council(^21^)

  • Providers of electronic communications services as defined in Article 2, point (4), of Directive (EU) 2018/1972 insofar as their services are publicly available

  • Public administration

  • Public administration entitiesmeans an entity recognised as such in a Member State in accordance with national law, not including the judiciary, parliaments or central banks, which complies with the following criteria:it is established for the purpose of meeting needs in the general interest and does not have an industrial or commercial character;it has legal personality or is entitled by law to act on behalf of another entity with legal personality;it is financed, for the most part, by the State authorities or by other central-level bodies governed by public law, is subject to management supervision by those authorities or bodies, or has an administrative, managerial or supervisory board, more than half of whose members are appointed by the State authorities or by other central-level bodies governed by public law;it has the power to address to natural or legal persons administrative or regulatory decisions affecting their rights in the cross-border movement of persons, goods, services or capital. of central governments as defined by Member States in accordance with national law

  • Space

  • Operators of ground-based infrastructure, owned, managed and operated by Member States or by private parties, that support the provision of space-based services, excluding providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972

  • Production, processing and distribution of food

  • Food businesses as defined in Article 3, point (2), of Regulation (EC) No 178/2002 of the European Parliament and of the Council(^22^) which are engaged exclusively in logistics and wholesale distribution and large scale industrial production and processing

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod