Source: OJ L 333, 27.12.2022, p. 80–152
ENRecital 24 Alternative provisions on reporting obligations
Where provisions of a sector-specific Union legal act require essential or important entitiesas defined in Article 3 of Directive (EU) 2022/2555 to comply with reporting obligations that are at least equivalent in effect to the reporting obligations laid down in this Directive, the consistency and effectiveness of the handling of incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; notifications should be ensured. To that end, the provisions relating to incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; notifications of the sector-specific Union legal act should provide the CSIRTscomputer security incident response teams, the competent authoritiesas defined in Article 46 or the single points of contact on cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; (single points of contact) under this Directive with an immediate access to the incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; notifications submitted in accordance with the sector-specific Union legal act. In particular, such immediate access can be ensured if incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; notifications are being forwarded without undue delay to the CSIRT, the competent authorityas defined in Article 46 or the single point of contact under this Directive. Where appropriate, Member States should put in place an automatic and direct reporting mechanism that ensures systematic and immediate sharing of information with the CSIRTscomputer security incident response teams, the competent authoritiesas defined in Article 46 or the single points of contact concerning the handling of such incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; notifications. For the purpose of simplifying reporting and of implementing the automatic and direct reporting mechanism, Member States could, in accordance with the sector-specific Union legal act, use a single entry point.