Version status: Applicable | Document consolidation status: No known changes

Published date: 7 June 2019

Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance)

	Recitals
	Title I General provisions (arts. 1-2)
	Article 1 Subject matter and scope
	Article 2 Definitions
	Title II ENISA (The European union agency for cybersecurity) (arts. 3-45)
	Chapter I Mandate and objectives (arts. 3-4)
	Article 3 Mandate
	Article 4 Objectives
	Chapter II Tasks (arts. 5-12)
	Article 5 Development and implementation of Union policy and law
	Article 6 Capacity-building
	Article 7 Operational cooperation at Union level
	Article 8 Market, cybersecurity certification, and standardisation
	Article 9 Knowledge and information
	Article 10 Awareness-raising and education
	Article 11 Research and innovation
	Article 12 International cooperation
	Chapter III Organisation of ENISA (arts. 13-28)
	Article 13 Structure of ENISA
	Section 1 Management Board (arts. 14-18)
	Article 14 Composition of the Management Board
	Article 15 Functions of the Management Board
	Article 16 Chairperson of the Management Board
	Article 17 Meetings of the Management Board
	Article 18 Voting rules of the Management Board
	Section 2 Executive Board (art. 19)
	Article 19 Executive Board
	Section 3 Executive Director (art. 20)
	Article 20 Duties of the Executive Director
	Section 4 ENISA Advisory Group, Stakeholder Cybersecurity Certification Group and National Liaison Officers Network (arts. 21-23)
	Article 21 ENISA Advisory Group
	Article 22 Stakeholder Cybersecurity Certification Group
	Article 23 National Liaison Officers Network
	Section 5 Operation (arts. 24-28)
	Article 24 Single programming document
	Article 25 Declaration of interests
	Article 26 Transparency
	Article 27 Confidentiality
	Article 28 Access to documents
	Chapter IV Establishment and structure of ENISA's budget (arts. 29-33)
	Article 29 Establishment of ENISA's budget
	Article 30 Structure of ENISA's budget
	Article 31 Implementation of ENISA's budget
	Article 32 Financial rules
	Article 33 Combating fraud
	Chapter V Staff (arts. 34-37)
	Article 34 General provisions
	Article 35 Privileges and immunity
	Article 36 Executive Director
	Article 37 Seconded national experts and other staff
	Chapter VI General provisions concerning ENISA (arts. 38-45)
	Article 38 Legal status of ENISA
	Article 39 Liability of ENISA
	Article 40 Language arrangements
	Article 41 Protection of personal data
	Article 42 Cooperation with third countries and international organisations
	Article 43 Security rules on the protection of sensitive non-classified information and classified information
	Article 44 Headquarters Agreement and operating conditions
	Article 45 Administrative control
	Title III Cybersecurity certification framework (arts. 46-65)
	Article 46 European cybersecurity certification framework
	Article 47 The Union rolling work programme for European cybersecurity certification
	Article 48 Request for a European cybersecurity certification scheme
	Article 49 Preparation, adoption and review of a European cybersecurity certification scheme
	Article 50 Website on European cybersecurity certification schemes
	Article 51 Security objectives of European cybersecurity certification schemes
	Article 52 Assurance levels of European cybersecurity certification schemes
	Article 53 Conformity self-assessment
	Article 54 Elements of European cybersecurity certification schemes
	Article 55 Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes
	Article 56 Cybersecurity certification
	Article 57 National cybersecurity certification schemes and certificates
	Article 58 National cybersecurity certification authorities
	Article 59 Peer review
	Article 60 Conformity assessment bodies
	Article 61 Notification
	Article 62 European Cybersecurity Certification Group
	Article 63 Right to lodge a complaint
	Article 64 Right to an effective judicial remedy
	Article 65 Penalties
	Title IV Final provisions (arts. 66-69)
	Article 66 Committee procedure
	Article 67 Evaluation and review
	Article 68 Repeal and succession
	Article 69 Entry into force
	Annex - Requirements to be met by conformity assessment bodies
	Done at