1. Where financial entities outsource the incident reporting obligation in accordance with Article 19(5) of Regulation (EU) 2022/2554, they shall inform the competent authorities prior to any notification or reporting and indicate the name and contact details, including Legal Entity Identifier (LEI), of the third party that will submit the incident notification or report on their behalf. Financial entities shall also inform competent authorities where such outsourcing does no longer take place or has been cancelled.
2. Where outsourcing arrangements are of long-term or general nature, financial entities shall notify the competent authority prior to any notification or reporting and provide details, including the LEI codes, of the third party that will be submitting the incident notification of reports.