<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2026/881 — Delegated act — Delaying the dissemination of notifications [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5","url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5","title":"Article 5 — Terms and conditions for applying cybersecurity-related grounds in relation to the single reporting platform","family":"l2_unit_view","work_id":"spaces/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","view_of":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2026/881, OJ L, 2026/881, 20.4.2026","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2026/881/oj/eng","valid_from":"2026-05-10","valid_until":null,"content_id":"f4f25651149984b6","versions":["2026-05-10"],"version_url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5/versions/2026-10-26/rev/f4f25651149984b6","versions_url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5/versions","relations_url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/5/relations","act_url":"https://www.headlesslaw.com/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications#art-5","source_line":"Commission Delegated Regulation (EU) 2026/881 · binding · OJ L, 2026/881, 20.4.2026 · dated 11 Dec 2025 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2025-12-11","published_on":"2026-04-20","entry_into_force":"2026-05-10","locators":{"document_date":"CELLAR 32026R0881 work_date_document","published_on":"CELLAR 32026R0881 official-journal-act_date_publication","entry_into_force":"CELLAR 32026R0881 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","path":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","name":"Commission Delegated Regulation (EU) 2026/881","number":"2026/881","celex":"32026R0881","title_official":"COMMISSION DELEGATED REGULATION (EU) 2026/881 of 11 December 2025 supplementing Regulation (EU) 2024/2847 of the European Parliament and of the Council by specifying the terms and conditions for applying the cybersecurity-related grounds in relation to delaying the dissemination of notifications (Text with EEA relevance)","document_date":"2025-12-11"},"position":{"kind":"article","key":"5","index":5,"articles":6,"annexes":0},"prev":{"path":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/4","key":"4","title":"Article 4 — Terms and conditions for applying cybersecurity-related grounds in relation to a specific CSIRT"},"next":{"path":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/articles/6","key":"6","title":"Article 6"},"act_anchor":"#art-5"}}} -->
# Article 5 — Terms and conditions for applying cybersecurity-related grounds in relation to the single reporting platform

**Commission Delegated Regulation (EU) 2026/881 · binding · OJ L, 2026/881, 20.4.2026 · dated 11 Dec 2025 [in force]**

*In force · Commission Delegated Regulation (EU) 2026/881, OJ L, 2026/881, 20.4.2026 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2026/881/oj/eng)*

The CSIRT initially receiving the notification may decide to delay the dissemination of notifications via the single reporting platform established by Article 16 of Regulation (EU) 2024/2847 where ENISA has informed the CSIRTs Network, in accordance with Article 16(4) of that Regulation, that the single reporting platform has been affected by a cybersecurity incident casting doubt on its ability to ensure the confidentiality of notified information. In such cases, the CSIRT initially receiving the notification may delay the dissemination via the single reporting platform until ENISA has informed the CSIRTs Network that the platform’s ability to ensure the confidentiality of notifications has been restored.
