NIS2 Art. 30 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this article. Contains: the article text, related recitals, cases citing it, enforcement stats and top fines, guidance, and related topics. Everything links back to its source on overview.legal — legal information, not advice.

Voluntary notification of relevant information

Article 19 GDPR - Notification of Rectification, Erasure or Restriction Notified Body Reporting and Notification Obligations NIS2 Addressees and Responsible Entities
In force — consolidated2022-12-27 · CELEX 02022L2555-20221227 · ELI ↗
Version history 1
  • 2022-12-27in force CELEX 02022L2555-20221227
  1. 1.

    Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis, by:

    Article 19 GDPR - Notification of Rectification, Erasure or Restriction Notified Body Reporting and Notification Obligations
    1. a)
      essential and important entities with regard to incidents, cyber threats and near misses;
      NIS2 Addressees and Responsible Entities
    2. b)
      entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.
  2. 2.

    Member States shall process the notifications referred to in paragraph 1 of this Article in accordance with the procedure laid down in Article 23. Member States may prioritise the processing of mandatory notifications over voluntary notifications.

    1. Where necessary, the CSIRTs and, where applicable, the competent authorities shall provide the single points of contact with the information about notifications received pursuant to this Article, while ensuring the confidentiality and appropriate protection of the information provided by the notifying entity. Without prejudice to the prevention, investigation, detection and prosecution of criminal offences, voluntary reporting shall not result in the imposition of any additional obligations upon the notifying entity to which it would not have been subject had it not submitted the notification.