European Union (Measures for a High Common Level of Security of Network and Information Systems) Regulations 2018 [S.I. No. 360 of 2018]

	⚠ Introductory Text
	⚠ Part 1 General Provisions (regs. 1-6)
	⚠ Regulation 1 Citation
	⚠ Regulation 2 Interpretation
	⚠ Regulation 3 Application
	⚠ Regulation 4 Safeguarding of State's essential functions
	⚠ Regulation 5 Sharing of information
	⚠ Regulation 6 Co-operation with Data Protection Commission and the Garda Siochána
	⚠ Part 2 Competent Authority, Single Point of Contact, CSIRT (regs. 7-10)
	⚠ Regulation 7 Competent authority for operators of essential services
	⚠ Regulation 8 Competent authority for digital service providers
	⚠ Regulation 9 Single Point of Contact
	⚠ Regulation 10 CSIRT
	⚠ Part 3 National Strategy on the Security of Network and Information Systems (reg. 11)
	⚠ Regulation 11 National Strategy on the security of network and information systems
	⚠ Part 4 Operators of Essential Services (regs. 12-18)
	⚠ Regulation 12 Designation of Operators of Essential Services
	⚠ Regulation 13 Procedure for designation as operator of essential services
	⚠ Regulation 14 Amendment of designation as operator of essential services by addition of sector, subsector or essential service in respect of which a person is designated
	⚠ Regulation 15 Amendment of designation as operator of essential services by cancellation of category of sector or subsector or essential service in respect of which a person is designated
	⚠ Regulation 16 Register of Operators of Essential Services, Combined Operators Register
	⚠ Regulation 17 Security requirements in respect of operators of essential services
	⚠ Regulation 18 Incident notification by operators of essential services
	⚠ Part 5 Digital Services (regs. 19-24)
	⚠ Regulation 19 Definition
	⚠ Regulation 20 Relevant digital service provider
	⚠ Regulation 21 Security measures to be taken by relevant digital service providers
	⚠ Regulation 22 Incident notification by a relevant digital service provider
	⚠ Regulation 23 Co-operation and assistance in respect of relevant digital service providers whose network and information systems are not in State
	⚠ Regulation 24 Co-operation in respect of digital service providers whose main establishment or designated representative not in State but whose network and information systems are in State
	⚠ Part 6 Guidelines (reg. 25)
	⚠ Regulation 25 Guidelines
	⚠ Part 7 Voluntary Notification (reg. 26)
	⚠ Regulation 26 Voluntary Notification
	⚠ Part 8 Implementation and Enforcement (regs. 27-38)
	⚠ Regulation 27 Security assessment
	⚠ Regulation 28 Appointment of authorised officers
	⚠ Regulation 29 Powers of authorised officers
	⚠ Regulation 30 Compliance notice
	⚠ Regulation 31 Information notice
	⚠ Regulation 32 Service of documents
	⚠ Regulation 33 Offence by body corporate
	⚠ Regulation 34 Penalties
	⚠ Regulation 35 Costs of prosecutions
	⚠ Regulation 36 Prosecution of offences-operators of essential services
	⚠ Regulation 37 Prosecution of offences-relevant digital service providers
	⚠ Regulation 38 Hearing of proceedings otherwise than in public
	⚠ Schedule 1
	⚠ Schedule 2
	⚠ Given under