Article 32y

(ea)provide technical support in relation to anonymisation, pseudonymisation and state-of-the-art methods to preserve privacy, including encryption and secure processing environments, not only for personal data but also for confidential business information, paying particular attention to the residual risk of re-identification, taking into account the means reasonably likely to be used;

5a.Member States shall remain responsible for establishing and operating a single, integrated national reporting portal for all statutory reporting obligations, including, as a minimum, notifications under the Cyber Resilience Act (CRA), the NIS 2 Directive, the CER Directive, the DORA Regulation, the eIDAS Regulation and the GDPR.

Those national reporting portals are designed to be interoperable on the basis of uniform functional and technical requirements set by ENISA.

The national reporting portals provide for interoperable, automated and secure transmission of relevant notifications to competent authorities in other Member States and/or to ENISA, where this is necessary under Union law or national law.

ENISA performs a supporting and coordinating role in promoting interoperability, standardisation and quality assurance, without becoming responsible for central storage or processing of all incident notifications at Union level.