icon-grid
Better Regulation logo
Table of Contents

Table of Contents

Expand all headings Collapse all headings Expand side bar Collapse side bar
Network and Information Systems Regulations 2018 [SI 2018 No. 506]Introductory TextPart 1 Introduction (reg. 1)Regulation 1 Citation, commencement, interpretation and applicationPart 2 The National Framework (regs. 2-7)Regulation 2 The NIS national strategyRegulation 3 Designation of national competent authoritiesRegulation 4 Designation of the single point of contactRegulation 5 Designation of computer security incident response teamRegulation 6 Information sharing - enforcement authoritiesRegulation 7 Information sharing - Northern IrelandPart 3 Operators of essential services (regs. 8-11)Regulation 8 Identification of operators of essential servicesRegulation 8A Nomination by an OES of a person to act on its behalf in the United KingdomRegulation 9 RevocationRegulation 10 The security duties of operators of essential servicesRegulation 11 The duty to notify incidentsPart 4 Digital Services (regs. 12-14A)Regulation 12 Relevant digital service providersRegulation 13 Co-operation with the European UnionRegulation 14 Registration with the Information CommissionerRegulation 14A Representatives of digital service providers established outside the United KingdomPart 5 Enforcement and penalties (regs. 15-20)Regulation 15 Information noticesRegulation 16 Power of inspectionRegulation 17 Enforcement notices for breach of dutiesRegulation 18 PenaltiesRegulation 19 Independent review of designation decisions and penalty decisionsRegulation 19A Appeal by an OES or RDSP to the First-tier TribunalRegulation 19B Decision of the First-tier TribunalRegulation A20 Enforcement by civil proceedingsRegulation 20 Enforcement of penalty noticesPart 6 Miscellaneous (regs. 21-25)Regulation 21 FeesRegulation 22 Proceeds of penaltiesRegulation 23 Enforcement action - general considerationsRegulation 24 Service of documentsRegulation 25 Review and reportSchedule 1 Designated Competent AuthoritiesSchedule 2 Essential Services and Threshold RequirementsSignatureExplanatory NoteExplanatory MemorandumImpact Assessments
Page Overview
Related
Document Overview
Tools
Set a date to view the document
Text comparison options
Full text - Date 1 vs Date 2
Amendments requiring commencement - Current text vs Text requiring commencement
Draft proposed changes - Current text vs Text proposed by drafting documents
Coming soon: Any documents - Any document vs Another document at any date
Print / Export options
Whole document
Selected pages
Consolidated PDF of the entire document as of 10th January 2025
Original PDF
Export
Export line by line
Export provision to provision
Report template
Create report template
Alert me to changes
Manage alerts
Bookmarks
This document
Manage bookmarks
Search within this document
View previous searches
Share
Original source link (1)
Get page link
Share via email application
Next
Version status: In force | Document consolidation status: Updated to reflect all known changes
Published date: 19 April 2018

Network and Information Systems Regulations 2018 [SI 2018 No. 506]

Introductory Text
Part 1 Introduction (reg. 1)
Regulation 1 Citation, commencement, interpretation and application
Part 2 The National Framework (regs. 2-7)
Regulation 2 The NIS national strategy
Regulation 3 Designation of national competent authorities
Regulation 4 Designation of the single point of contact
Regulation 5 Designation of computer security incident response team
Regulation 6 Information sharing - enforcement authorities
Regulation 7 Information sharing - Northern Ireland
Part 3 Operators of essential services (regs. 8-11)
Regulation 8 Identification of operators of essential services
Regulation 8A Nomination by an OES of a person to act on its behalf in the United Kingdom
Regulation 9 Revocation
Regulation 10 The security duties of operators of essential services
Regulation 11 The duty to notify incidents
Part 4 Digital Services (regs. 12-14A)
Regulation 12 Relevant digital service providers
Regulation 13 Co-operation with the European Union
Regulation 14 Registration with the Information Commissioner
Regulation 14A Representatives of digital service providers established outside the United Kingdom
Part 5 Enforcement and penalties (regs. 15-20)
Regulation 15 Information notices
Regulation 16 Power of inspection
Regulation 17 Enforcement notices for breach of duties
Regulation 18 Penalties
Regulation 19 Independent review of designation decisions and penalty decisions
Regulation 19A Appeal by an OES or RDSP to the First-tier Tribunal
Regulation 19B Decision of the First-tier Tribunal
Regulation A20 Enforcement by civil proceedings
Regulation 20 Enforcement of penalty notices
Part 6 Miscellaneous (regs. 21-25)
Regulation 21 Fees
Regulation 22 Proceeds of penalties
Regulation 23 Enforcement action - general considerations
Regulation 24 Service of documents
Regulation 25 Review and report
Schedule 1 Designated Competent Authorities
⚠ Schedule 2 Essential Services and Threshold Requirements
Signature
Explanatory Note
Explanatory Memorandum
Impact Assessments
Next