Article 30 – Voluntary notification of relevant information

Member States shall ensure that, in addition to the notification obligation provided for in Article 23, notifications can be submitted to the CSIRTs or, where applicable, the competent authorities, on a voluntary basis via national entry point referred to in Article 23b, by:

essential and important entities with regard to incidents, cyber threats and near misses;

entities other than those referred to in point (a), regardless of whether they fall within the scope of this Directive, with regard to significant incidents, cyber threats and near misses.