Amendment 283· NIS2 Directive Article 30(1)
~Alternative
Text of the amendment
As tabled
Wordingagainst the Commission’s
1. Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis via the single-entryreporting channel designated by the competent Member State, including through a national contact point, through a national interface or, where the competent Member State has so decided, through the interoperable European framework established pursuant to Article 23a, by:
(a) essential and important entities with regard to incidents, cyber threats and near misses; entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.’
Struck CommissionHighlighted amendment
NIS2 Directive Article 30 with this amendment
Amendment 283 applied to the Commission proposal, no other amendment
Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis via the single-entryreporting channel designated by the competent Member State, including through a national contact point, through a national interface or, where the competent Member State has so decided, through the interoperable European framework established pursuant to Article 23a, by:
essential and important entities with regard to incidents, cyber threats and near misses; entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.’ (a) essential and important entities with regard to incidents, cyber threats and near misses;
~AmendedUnchanged: (b) and (2)
entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.
Member States shall process the notifications referred to in paragraph 1 of this Article in accordance with the procedure laid down in Article 23. Member States may prioritise the processing of mandatory notifications over voluntary notifications.
Where necessary, the CSIRTs and, where applicable, the competent authorities shall provide the single points of contact with the information about notifications received pursuant to this Article, while ensuring the confidentiality and appropriate protection of the information provided by the notifying entity. Without prejudice to the prevention, investigation, detection and prosecution of criminal offences, voluntary reporting shall not result in the imposition of any additional obligations upon the notifying entity to which it would not have been subject had it not submitted the notification.
Struck removed Highlighted added Full text on the NIS2 Directive Article 30 page
Target
Wording of the targeted provisionlaw in force, Commission proposal, latest Council text
Law in forceNIS2 Directive, Article 30(1)
Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis, by:
(a)essential and important entities with regard to incidents, cyber threats and near misses;
(b)entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.
Commission proposalCOM(2025) 837
1. Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis via the single-entry point established pursuant to Article 23a, by: (a) essential and important entities with regard to incidents, cyber threats and near misses; (b) entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.
Council text of 22 October 2026ST 14756/26
1.Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis via national entry point referred to in Article 23b, by:
(a)essential and important entities with regard to incidents, cyber threats and near misses;
(b)entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.
Cite this amendment
Amendment 283 (Daniel Buda), European Parliament, Committee on Legal Affairs, amendments 69–296 to the draft opinion on COM(2025) 837 (JURI-AM-790236, PE790.236v01-00, 29 June 2026), pp. 166–167
Link, short form and official text
Amendment 283 (Daniel Buda), European Parliament, Committee on Legal Affairs, amendments 69–296 to the draft opinion on COM(2025) 837 (JURI-AM-790236, PE790.236v01-00, 29 June 2026), pp. 166–167
JURI Amendment 283 (JURI-AM-790236), p. 166