(1) Where the network and information systems of a relevant digital service provider are located in one or more member states other than the State, the competent authority may, for the purpose of assessing the compliance by the relevant digital service provider with its obligations under these Regulations, request the co-operation and assistance of the competent authority in the other member state or states.

(2) For the purpose of a request referred to in paragraph (1), the competent authority may do one or both of the following:

(a) share information with the competent authority in the other member state in relation to the relevant digital service provider;

(b) request the competent authority in the other member state to require the relevant digital service provider to provide to that competent authority the information necessary for the security of the provider's network and information systems to be assessed by the CSIRT.