Digital Omnibus proposal· Recital 49

5 propose alternative wording.

1. 134 ~Alternative Victor NegrescuS&D · JURI “The design, documentation and guidance for the single-entry point should be clear, accessible and proportionate, in particular for SMEs, and should…”

   (49) Several horizontal or sectorial Union legal acts require the notification of the same event to different authorities using different technical means and channels. The single-entry point for incident reporting should allow entities to fulfil reporting obligations under Directive (EU) 2022/2555, Regulation (EU) 2016/679, Regulation (EU) 2022/2554, Regulation (EU) No 910/2014 and Directive (EU) 2022/2557 by submitting notifications to a single interface. Furthermore, the single-entry point should give a possibility for entities to retrieve information that they have previously submitted using the single-entry point, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents. The design, documentation and guidance for the single-entry point should be clear, accessible and proportionate, in particular for SMEs, and should promote digital literacy and awareness of cybersecurity obligations among entities required to report incidents.

   Tabled by

   Victor Negrescu

   Group

   S&D

   Targets

   Digital Omnibus proposal Recital 49

   Document

   JURI amendments 69–296 to the draft opinion

   Source

   Official text, page 65

   Printed header

   Recital 49

   Links

   Link to this amendment
   Cite this amendment

2. 187 ~Alternative Sophia KircherEPP · IMCO “In implementing the single-entry point, due account should be taken of the ongoing implementation of Directive (EU) 2022/2555 in order to avoid the…”

   (49) Several horizontal or sectorial Union legal acts require the notification of the same event to different authorities using different technical means and channels. The single-entry point for incident reporting should allow entities to fulfil reporting obligations under Directive (EU) 2022/2555, Regulation (EU) 2016/679, Regulation (EU) 2022/2554, Regulation (EU) No 910/2014 and Directive (EU) 2022/2557 by submitting notifications to a single interface. Furthermore, the single-entry point should give a possibility for entities to retrieve information that they have previously submitted using the single-entry point, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents. In implementing the single-entry point, due account should be taken of the ongoing implementation of Directive (EU) 2022/2555 in order to avoid the creation of overlapping or duplicative reporting obligations.

   Tabled by

   Sophia Kircher

   Group

   EPP

   Targets

   Digital Omnibus proposal Recital 49

   Document

   IMCO amendments 125–328 to the draft opinion

   Source

   Official text, pages 61–62

   Printed header

   Recital 49

   Links

   Link to this amendment
   Cite this amendment

3. 492 ~Alternative Julie Rechagneux +9ECR, PfE · ITRE–LIBE “Member States should establish a single national entry point for the submission of those notifications. The competent national authorities should…”

   (49) Several horizontal or sectorial Union legal acts require the notification of the same event to different authorities using different technical means and channels. The EU entry point and national single-entry pointpoints for incident reporting should allow entities to fulfil reporting obligations under Directive (EU) 2022/2555, Regulation (EU) 2016/679, Regulation (EU) 2022/2554, Regulation (EU) No 910/2014 and Directive (EU) 2022/2557 by submitting notifications to a single interface. Furthermore, the single-entry point should give a possibility for entities to retrieve information that they have previously submitted using the single-entry point, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents.Member States should establish a single national entry point for the submission of those notifications. The competent national authorities should remain solely responsible for receiving, assessing and handling notifications. Information received through the national single entry points may be made available, where relevant and in accordance with applicable Union law, to ENISA for the purposes of situational awareness, trend analysis, risk monitoring and the identification of systemic vulnerabilities. Such cooperation should not affect the competences of national authorities nor the independence of supervisory authorities established under Union law. Furthermore, the layered single-entry points structure should give a possibility for entities to retrieve information that they have previously submitted using the single-entry points, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents.

   Justification

   Simplification for reporting entities does not justify transferring to a Union body competences exercised at national level. The single entry point must be national; ENISA’s role is one of aggregation for situational awareness, not of substantive handling.

   Tabled by

   Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Ewa Zajączkowska-Hernik, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, António Tânger Corrêa, Christophe Bay

   Group

   ECR, PfE

   Targets

   Digital Omnibus proposal Recital 49

   Document

   ITRE–LIBE amendments 401–526 to the draft report

   Source

   Official text, pages 79–80

   Printed header

   Recital 49

   Links

   Link to this amendment
   Cite this amendment

4. 493 ~Alternative Markus BuchheitESN · ITRE–LIBE “to avoid unnecessary duplicate reporting, Member States should be able to provide”

   (49) Several horizontal or sectorialsectoral Union legal acts require the notification of the same event to different authorities using different technical means and channels. The single-entry point for incident reporting should allow entities to fulfil reporting obligations under Directive (EU) 2022/2555, Regulation (EU) 2016/679, Regulation (EU) 2022/2554, Regulation (EU) No 910/2014 and Directive (EU) 2022/2557 by submitting notifications to a single interface.In order to avoid unnecessary duplicate reporting, Member States should be able to provide for national technical solutions or national coordinating points for the structured onward transmission of such notifications. Furthermore, the single-entry point should give a possibility for entities to retrieve information that they have previously submitted using the single-entry point, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents.A Union single-entry point should be used only in a supporting role for clearly cross-border or Union-wide systemic incidents and should neither replace nor de facto displace national reporting channels for purely national incidents."

   Tabled by

   Markus Buchheit

   Group

   ESN

   Targets

   Digital Omnibus proposal Recital 49

   Document

   ITRE–LIBE amendments 401–526 to the draft report

   Source

   Official text, pages 80–81

   Printed header

   Recital 49

   Links

   Link to this amendment
   Cite this amendment

5. 494 ~Alternative Diana Iovanovici ŞoşoacăNI · ITRE–LIBE “based on a legal certainty programme, without diverging national interpretations”

   (49) Several horizontal or sectorial Union legal acts require the notification of the same event to different authorities using different technical means and channels. The single-entry point for incident reporting should allow entities to fulfil reporting obligations under Directive (EU) 2022/2555, Regulation (EU) 2016/679, Regulation (EU) 2022/2554, Regulation (EU) No 910/2014 and Directive (EU) 2022/2557 by submitting notifications to a single interface. Furthermore, the single-entry point should give a possibility for entities to retrieve information that they have previously submitted using the single-entry point, thereby helping entities to keep track of their compliance with reporting obligations in connection with specific incidents based on a legal certainty programme, without diverging national interpretations.

   Tabled by

   Diana Iovanovici Şoşoacă

   Group

   NI

   Targets

   Digital Omnibus proposal Recital 49

   Document

   ITRE–LIBE amendments 401–526 to the draft report

   Source

   Official text, pages 81–82

   Printed header

   Recital 49

   Links

   Link to this amendment
   Cite this amendment