Skip to the text
Text as of 27 Dec 2022 · Consolidated version of 27 December 2022 · Same wording as today’s text.Today’s text

Article 8 — Competent authorities and single points of contact

Digital & dataLevel 1DirectiveNIS2Stage: AdoptedOfficial source

8(1)

1.Each Member State shall designate or establish one or more competent authorities responsible for cybersecurity and for the supervisory tasks referred to in Chapter VII (competent authorities).

Copy link
8(2)

2.The competent authorities referred to in paragraph 1 shall monitor the implementation of this Directive at national level.

Copy link
8(3)

3.Each Member State shall designate or establish a single point of contact. Where a Member State designates or establishes only one competent authority pursuant to paragraph 1, that competent authority shall also be the single point of contact for that Member State.

Copy link
8(4)

4.Each single point of contact shall exercise a liaison function to ensure cross-border cooperation of its Member State’s authorities with the relevant authorities of other Member States, and, where appropriate, with the Commission and ENISA, as well as to ensure cross-sectoral cooperation with other competent authorities within its Member State.

Copy link
8(5)

5.Member States shall ensure that their competent authorities and single points of contact have adequate resources to carry out, in an effective and efficient manner, the tasks assigned to them and thereby to fulfil the objectives of this Directive.

Copy link
8(6)

6.Each Member State shall notify the Commission without undue delay of the identity of the competent authority referred to in paragraph 1 and of the single point of contact referred to in paragraph 3, of the tasks of those authorities, and of any subsequent changes thereto. Each Member State shall make public the identity of its competent authority. The Commission shall make a list of the single points of contact publicly available.

Copy link