The Network and Information Systems Regulations 2018

[^key-cf01b43dfe2a023a96124650b4876cac]: Word in reg. 16(3)(b) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(c)(ii) (with reg. 21)

[^key-2886499e3240a2f72f66d855e52cc684]: Word in reg. 16(3)(c) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(c)(iii)(aa) (with reg. 21)

[^key-26fac1d9605c5722be9bec201727b3cd]: Words in reg. 16(3)(c) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(c)(iii)(bb) (with reg. 21)

[^key-122d32fec95f2413bc82e8f3861bf9d9]: Reg. 16(3)(d) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(c)(iv) (with reg. 21)

[^key-6b73ecade4c2da52dc54172dd0d2c813]: Reg. 16(3)(f)(g) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(c)(v) (with reg. 21)

[^key-7cadc331f9a552a38fdee3a084ba57ab]: Word in reg. 16(4) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(d)(i) (with reg. 21)

[^key-57b408ae6edd5aa50507827b60c007bf]: Words in reg. 16(4) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(d)(ii) (with reg. 21)

[^key-b3e91ddc9aff56cfa39cf5e108fa9111]: Reg. 16(5)-(9) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 12(e) (with reg. 21)

[^key-1d0e42cc82dfa698c49e0c7ed0dd22ac]: Word in reg. 17 heading inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(a) (with reg. 21)

[^key-5a3dccdddfdda3fc928a50a3402daad4]: Words in reg. 17(1) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(b)(i)(aa) (with reg. 21)

[^key-2ff183bbfc9f5cf6fa2e5836364c2d3e]: Word in reg. 17(1) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(b)(i)(bb) (with reg. 21)

[^key-a86c2d49d3c8cc58688010ab09ba519a]: Reg. 17(1)(za)(zb) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(b)(ii) (with reg. 21)

[^key-7fc1d7da014d2764ba94274d6083f1f5]: Words in reg. 17(2) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(c)(i) (with reg. 21)

[^key-aaa6f3bc7707ef4361402e18ee9e606b]: Reg. 17(2)(da) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(c)(ii) (with reg. 21)

[^key-cc912a63fa4df55da631bcdb2534a430]: Reg. 17(2A)-(2D) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(d) (with reg. 21)

[^key-692e61abfd14fdd0964f6a540d8236e1]: Word in reg. 17(3) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(e)(i) (with reg. 21)

[^key-647bd4f8b8cbe96875ea86ce558290b2]: Reg. 17(3)(d) and word omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(e)(ii) (with reg. 21)

[^key-bcb1fbf99e3b0d3060881423765dfa41]: Reg. 17(3A) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(f) (with reg. 21)

[^key-67ce0cc6898ec1eccad60930cd9bd1e3]: Word in reg. 17(4)(a) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(g)(i) (with reg. 21)

[^key-4c02a7485dbd4b586a64aa0a828a33d2]: Word in reg. 17(4)(a) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 13(g)(ii) (with reg. 21)

[^key-7d492cebc7a720982d54bc4f5dfc8dea]: Reg. 18(1)(2) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(a) (with reg. 21)

[^key-266d29157195b99b2f1f2f4107480f65]: Words in reg. 18(3) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(b)(i) (with reg. 21)

[^key-2bbb254ab72291dcf42172345fcd826d]: Word in reg. 18(3)(b) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(b)(ii) (with reg. 21)

[^key-ff6ceb43f87e8f393aec34e00bf364f8]: Words in reg. 18(3)(c) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(b)(iii) (with reg. 21)

[^key-971f3cad609cac8c78faa8df4e2a577d]: Reg. 18(3)(d)-(f) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(b)(iv) (with reg. 21)

[^key-ef9450234edb6d6c0b89f93e33ffe319]: Reg. 18(3A)-(3E) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(c) (with reg. 21)

[^key-dbf92f8ae87683078a0765a2011fedcb]: Words in reg. 18(5) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(d) (with reg. 21)

[^key-8c5d6473e9084944fbbd64807294d8a7]: Words in reg. 18(6) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(i) (with reg. 21)

[^key-fe27cfc87e6e086e24d19eebee3dc029]: Word in reg. 18(6)(a) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(ii)(aa) (with reg. 21)

[^key-8bc73d8abda1fd2592e58e90eef07796]: Words in reg. 18(6)(a) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(ii)(bb) (with reg. 21)

[^key-b4c0e74a9c723f11cf7a45718a388848]: Reg. 18(6)(b) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(iii) (with reg. 21)

[^key-26dda7bd4909dea2916873090c32a595]: Word in reg. 18(6)(c) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(iv)(aa) (with reg. 21)

[^key-c5a56276df52a2876c44061d3a8b5288]: Words in reg. 18(6)(c) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(iv)(bb) (with reg. 21)

[^key-4bd151ccdf280496e12a86267d49ff09]: Word in reg. 18(6)(d) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(v)(aa) (with reg. 21)

[^key-840352aa5900cc4ae5a968fc0255d179]: Words in reg. 18(6)(d) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(e)(v)(bb) (with reg. 21)

[^key-e16096f1ba36ca4cb1b8ad5666fed929]: Reg. 18(7)(a)(i)(ii) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(f)(i) (with reg. 21)

[^key-b52727ebca82bf7ca2e784b23682d74b]: Reg. 18(7)(b) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 14(f)(ii) (with reg. 21)

[^key-fa4b6e958162f8b3fa163a1928d3c565]: Reg. 19 omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 15 (with reg. 21)

[^key-12d5ecb69c844cee04ad070a6f11bbb8]: Words in reg. 20(6) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 17 (with reg. 21)

[^key-344d8880f2543a04ba85f267752cb672]: Words in reg. 23(1) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 18 (with reg. 21)

[^key-0a63c87e87844a67dac8c563ef4d18c3]: Words in reg. 25(2) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 19(a)(i) (with reg. 21)

[^key-d2e636eb8002ab07bae9ee4e06afd618]: Words in reg. 25(2) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 19(a)(ii) (with reg. 21)

[^key-cb272dd112b42d3316f425983babd0ff]: Words in reg. 25(4) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 19(b) (with reg. 21)

[^key-6c7afe6d9ae27a417121dc66d6e7d45e]: Word in Sch. 2 para. 2(3)(a) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(i)(aa) (with reg. 21)

[^M_F_fe839b08-d1df-466f-8054-8d694b85b4d9]: Words in Sch. 2 para. 2(3)(a) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(i)(aa) (with reg. 21)

[^key-7c99034bb7bc70d253802c443cffaebe]: Word in Sch. 2 para. 2(3)(b) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(i)(bb) (with reg. 21)

[^key-e73828ddcde43e94046b7b92d594dbda]: Words in Sch. 2 para. 2(4)(a) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(ii)(aa) (with reg. 21)

[^key-c22cbf1b34d1829608a81068458ab305]: Words in Sch. 2 para. 2(4)(b) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(ii)(bb) (with reg. 21)

[^key-caa7808c3c25d779b4bbc5aff5bb6b16]: Words in Sch. 2 para. 2(4) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(ii)(cc) (with reg. 21)

[^key-31fd648d0d6dfc33c20ea18bc17da9c9]: Words in Sch. 2 para. 2(5) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(iii)(aa) (with reg. 21)

[^key-5f4f786272e782a67d044d96fbc8dace]: Word in Sch. 2 para. 2(5) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(iii)(bb) (with reg. 21)

[^key-3e9da70f776a559ff727504f4fb2c461]: Words in Sch. 2 para. 2(6)(i) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(iv)(aa) (with reg. 21)

[^key-464235e1ec4abfa792690964f34b1b72]: Words in Sch. 2 para. 2(6)(ii) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(iv)(bb) (with reg. 21)

[^key-ab5faa8c5b4895ffd107ab23e14ba814]: Words in Sch. 2 para. 2(6) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(iv)(cc) (with reg. 21)

[^key-38ace4ca585bed9d2c548292199875c1]: Words in Sch. 2 para. 2(8)(c) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(v)(aa) (with reg. 21)

[^key-9c4c2fa134da6b065b65adffc9bb87dc]: Sch. 2 para. 2(8)(e) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(v)(bb) (with reg. 21)

[^key-501ce6000fbffea64920cf2e9c269350]: Sch. 2 para. 2(8)(ja) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(v)(cc) (with reg. 21)

[^key-79939166d907cebc4cb1935f5553c371]: Sch. 2 para. 2(8)(na) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(v)(dd) (with reg. 21)

[^key-4833c772d56a3dc1772b83b0f59d6dbe]: Words in Sch. 2 para. 2(10)(c) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(vi) (with reg. 21)

[^key-d24da807bd20274f24ebefce4c82420c]: Sch. 2 para. 2(11) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(a)(vii) (with reg. 21)

[^key-9a4a5a5aabf737e9f54a578f5796c9b4]: Sch. 2 para. 3(7)(a)(b) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(b)(i) (with reg. 21)

[^key-4c7ac806180ec7797e335a6237d42b21]: Sch. 2 para. 3(10)(oa) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(b)(ii)(aa) (with reg. 21)

[^key-ae8161069e7a0ebd14bbe6a605a083dc]: Sch. 2 para. 3(10)(sa) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(b)(ii)(bb) (with reg. 21)

[^key-aa4e9e27b483c88d1f6fdbc79724e219]: Words in Sch. 2 para. 3(12)(c) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(b)(iii) (with reg. 21)

[^key-269940e7b54f0575b109cad72231b1d2]: Sch. 2 para. 3(13) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(b)(iv) (with reg. 21)

[^key-4e40953885636066763d1da39e42a212]: Sch. 2 para. 8(2)(c)(iii) and word substituted for Sch. 2 para. 8(2)(c)(iii)-(vi) (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(c) (with reg. 21)

[^key-f88d7a15b47ff9dfce005ad5bb4a6641]: Sch. 2 para. 10(2)-(4) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(d)(i) (with reg. 21)

[^key-d75dee412e3d0904a662d97a4f713522]: Words in Sch. 2 para. 10(5)(a) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(d)(ii)(aa) (with reg. 21)

[^key-cab56b0070bd53be8950c5a6d73b2c1e]: Words in Sch. 2 para. 10(5)(b) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(d)(ii)(bb) (with reg. 21)

[^key-8acf913fe55f72a012b0aaa9ad701251]: Word in Sch. 2 para. 10(5) omitted (31.12.2020) by virtue of The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(d)(ii)(cc) (with reg. 21)

[^key-15a3b8ecc24fa5d699bbb3d9da2fbe70]: Sch. 2 para. 10(5)(ca) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 20(d)(ii)(cc) (with reg. 21)

[^key-565d7705d43987c95bc7c209472b5ae7]: Reg. 14A inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) (No. 2) Regulations 2019 (S.I. 2019/1444), regs. 1(2), 2(3); 2020 c. 1, Sch. 5 para. 1(1)

[^key-4fe6152f231ab0942361eaa1b3d7a37b]: Words in reg. 1 inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 2; 2020 c. 1, Sch. 5 para. 1(1)

[^key-e371627234b0dc4f3d0de98cf88f3698]: Words in reg. 1(2) inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) (No. 2) Regulations 2019 (S.I. 2019/1444), regs. 1(2), 2(2); 2020 c. 1, Sch. 5 para. 1(1)

[^key-28a85e24f9a5c5e5fe3554a02dc9a455]: Reg. 2(6) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 3(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-09289a455ccdc09e0c458c923738f8b1]: Words in reg. 2(7) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 3(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-33ce2ded5dda48ad2d97df17ac802ac7]: Words in reg. 3(3)(c) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 4(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-bf69834546bfb7b757c7462c57d7cdd5]: Reg. 3(3)(g)(ii) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 4(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-cba497abbcc8f6fe70f7943ade5620f1]: Reg. 3(3A) inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 4(c); 2020 c. 1, Sch. 5 para. 1(1)

[^key-02a82d983dc9fdc7b3ebd2aa1b411f8f]: Reg. 4(2) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 5(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-62513d43d70b0f263396d8855e6ff322]: Reg. 4(2A) inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 5(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-c21062e605f65dfbbae2b8b9c8e12858]: Words in reg. 4(3) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 5(c)(i); 2020 c. 1, Sch. 5 para. 1(1)

[^key-9ca28880a1114ed073c9d9665255e352]: Words in reg. 4(3)(b) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 5(c)(ii); 2020 c. 1, Sch. 5 para. 1(1)

[^key-b3598734e9d5d9e5062706b8aaf86d54]: Reg. 4(4)(5) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 5(d); 2020 c. 1, Sch. 5 para. 1(1)

[^key-5823bb34164559fbafaafc9ded85a088]: Reg. 5(2)(e) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 6(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-70316e3176470846c47a8aefc608f230]: Reg. 5(3) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 6(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-7e31ebec28d7bcfc80f64168e50d5510]: Words in reg. 6(1) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 7(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-8d05983322d72c74f793bebb7824d1e9]: Words in reg. 6(2) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 7(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-a38922e465b1258ed76866dac79961ac]: Reg. 8(7) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 8; 2020 c. 1, Sch. 5 para. 1(1)

[^key-caa807c22450de45df150a0645430c2a]: Reg. 9(5) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 9; 2020 c. 1, Sch. 5 para. 1(1)

[^key-86dbde6b8deeb6199988fa8cb3c3d68a]: Reg. 11(6) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 10; 2020 c. 1, Sch. 5 para. 1(1)

[^key-75ce6850781517ce5eca20b973ceb20e]: Words in reg. 12(1) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 11(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-dcca321ba0a1fc9c35764b95300c1d15]: Reg. 12(10) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 11(b) (as amended by S.I. 2019/1444, regs. 1(2), 4); 2020 c. 1, Sch. 5 para. 1(1)

[^key-0a80b2951b6dcaf76f170afa116bdd99]: Words in reg. 12(11) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 11(c); 2020 c. 1, Sch. 5 para. 1(1)

[^key-55f1890b9a9bbc679ee8c94804a999ba]: Words in reg. 12(14) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 11(d); 2020 c. 1, Sch. 5 para. 1(1)

[^key-baf491ce97f50f0928e2ffe6167e689e]: Reg. 12(17) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 11(e); 2020 c. 1, Sch. 5 para. 1(1)

[^key-8f8c4109a30d988c6cdd2415ce5709e0]: Reg. 13 substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 12; 2020 c. 1, Sch. 5 para. 1(1)

[^key-d74f1ab13d2a92ecd47916c487ed0e08]: Words in reg. 25(1)(a) inserted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 13(a); 2020 c. 1, Sch. 5 para. 1(1)

[^key-16c199c4bb456c3120ce363a3ca8d6da]: Reg. 25(3) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 13(b); 2020 c. 1, Sch. 5 para. 1(1)

[^key-3adb043b4b2785570e672ecac7602aa4]: Reg. 12(7)(b) substituted (12.1.2022) by The Network and Information Systems (EU Exit) (Amendment) Regulations 2021 (S.I. 2021/1461), regs. 1, 3(2)

[^key-c6925a1f20e85cd1ac90d5ccd75cfca2]: Words in reg. 1(2) inserted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 4 para. 236; S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

[^key-bc160b1c3bfd47ad74d6127a633b12cd]: Reg. 8(2A) inserted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 4 para. 237(2); S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

[^key-5145be3ef807fdad1022026e8b5afd79]: Words in reg. 8(8) inserted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 4 para. 237(3); S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

[^key-98e2b964a7dd97a650c63c2c85573291]: Words in Sch. 1 table substituted (3.5.2023) by The Secretaries of State for Energy Security and Net Zero, for Science, Innovation and Technology, for Business and Trade, and for Culture, Media and Sport and the Transfer of Functions (National Security and Investment Act 2021 etc) Order 2023 (S.I. 2023/424), art. 1(2), Sch. para. 63 (with art. 17)

[^key-4ffb9b2fce8882faba50072ab48915be]: Words in Sch. 2 para. 1(8)(h) substituted (25.5.2024) by The Energy Act 2023 (Consequential Amendments) Regulations 2024 (S.I. 2024/706), regs. 1(2), 33(a)

[^key-64f799886918b97166844d046c47f2bd]: Word in Sch. 2 para. 1(8)(h) omitted (25.5.2024) by virtue of The Energy Act 2023 (Consequential Amendments) Regulations 2024 (S.I. 2024/706), regs. 1(2), 33(b)

Nomination by an OES of a person to act on its behalf in the United Kingdom

8A

• (1) This regulation applies to any OES who has their head office outside the United Kingdom and—

• (a) provides an essential service of a kind referred to in one or more of paragraphs 1, 2, 3 and 10 of Schedule 2 (energy or digital infrastructure sector) within the United Kingdom; or

• (b) provides an essential service of a kind referred to in one or more of paragraphs 4 to 9 of Schedule 2 (transport, health or drinking water supply and distribution sector) within the United Kingdom and falls within paragraph (2).

• (2) An OES falls within this paragraph if they have received a notice in writing from a designated competent authority for the OES requiring them to comply with this regulation.

• (3) An OES to whom this regulation applies must—

• (a) nominate in writing a person in the United Kingdom with the authority to act on their behalf under these Regulations, including for the service of documents for the purposes of regulation 24 (a “nominated person”);

• (b) before the relevant date, notify the designated competent authority for the OES in writing of—

• (i) their name;

• (ii) the name and address of the nominated person; and

• (iii) up-to-date contact details of the nominated person (including email addresses and telephone numbers).

• (4) The OES must notify the designated competent authority for the OES of any changes to the information notified under paragraph (3)(b) as soon as practicable and in any event within seven days beginning with the day on which the change took effect.

• (5) The designated competent authority for the OES and GCHQ may, for the purposes of carrying out their responsibilities under these Regulations, contact the nominated person instead of or in addition to the OES.

• (6) A nomination under paragraph (3) is without prejudice to any legal action which could be initiated against the OES.

• (7) In this regulation, “relevant date” means the date three months after—

• (a) the first day (including that day) on which the OES was deemed to be designated as an OES under regulation 8(1); or

• (b) the day (including that day) on which the OES was designated as an OES under regulation 8(3),

unless the first day referred to in sub-paragraph (a) or the day referred to in sub-paragraph (b) was before 31st December 2020 in which case it means 31st March 2021.

Revocation

The security duties of operators of essential services

The duty to notify incidents

Enforcement notices for breach of duties

Appeal by an OES or RDSP to the First-tier Tribunal

19A

• (1) An OES may appeal to the First-tier Tribunal against one or more of the following decisions of the designated competent authority for the OES on one or more of the grounds specified in paragraph (3)—

• (a) a decision under regulation 8(3) to designate that person as an OES;

• (b) a decision under regulation 9(1) or (2) to revoke the designation of that OES;

• (c) a decision under regulation 17(1) to serve an enforcement notice on that OES;

• (d) a decision under regulation 18(3A) to serve a penalty notice on that OES.

• (2) A RDSP may appeal to the First-Tier Tribunal against one or both of the following decisions of the Information Commissioner on one or more of the grounds specified in paragraph (3)—

• (a) a decision under regulation 17(2) to serve an enforcement notice on that RDSP;

• (b) a decision under regulation 18(3B) to serve a penalty notice on that RDSP.

• (3) The grounds of appeal referred to in paragraphs (1) and (2) are—

• (a) that the decision was based on a material error as to the facts;

• (b) that any of the procedural requirements under these Regulations in relation to the decision have not been complied with and the interests of the OES or RDSP have been substantially prejudiced by the non-compliance;

• (c) that the decision was wrong in law;

• (d) that there was some other material irrationality, including unreasonableness or lack of proportionality, which has substantially prejudiced the interests of the OES or RDSP.

Decision of the First-tier Tribunal

19B

• (1) The First-tier Tribunal must determine the appeal after considering the grounds of appeal referred to in regulation 19A(3) and by applying the same principles as would be applied by a court on an application for judicial review.

• (2) The Tribunal may, until it has determined the appeal in accordance with paragraph (1) and unless the appeal is withdrawn, suspend the effect of the whole or part of any of the following decisions to which the appeal relates—

• (a) a decision under regulation 8(3) to designate a person as an OES;

• (b) a decision under regulation 9(1) or (2) to revoke the designation of a person as an OES;

• (c) a decision under regulation 17(1) to serve an enforcement notice;

• (d) a decision under regulation 17(2) to serve an enforcement notice;

• (e) a decision under regulation 18(3A) to serve a penalty notice; or

• (f) a decision under regulation 18(3B) to serve a penalty notice.

• (3) The Tribunal may—

• (a) confirm any decision to which the appeal relates; or

• (b) quash the whole or part of any decision to which the appeal relates.

• (4) Where the Tribunal quashes the whole or part of a decision to which the appeal relates, it must remit the matter back to the designated competent authority for the OES or, as the case may be, the Information Commissioner, with a direction to that authority or the Commissioner to reconsider the matter and make a new decision having regard to the ruling of the Tribunal.

• (5) The relevant competent authority or, as the case may be, the Information Commissioner, must have regard to a direction under paragraph (4).

• (6) Where the relevant competent authority or, as the case may be, the Information Commissioner, makes a new decision in accordance with a direction under paragraph (4), that decision is to be considered final.

Enforcement by civil proceedings

A20

• (1) This regulation applies where—

• (a) a designated competent authority for an OES has reasonable grounds to believe that the OES has failed to comply with the requirements of an enforcement notice as required by regulation 17(3A); or

• (b) the Information Commissioner has reasonable grounds to believe that a RDSP has failed to comply with the requirements of an enforcement notice as required by regulation 17(3A).

• (2) This regulation applies irrespective of whether the OES or RDSP has appealed to the First-tier Tribunal under regulation 19A.

• (3) But where an OES or RDSP has appealed to the First-tier Tribunal under regulation 19A and the Tribunal has granted a suspension of the effect of the whole or part of the relevant decision under regulation 19B(2), the relevant competent authority or the Information Commissioner, as the case may be, may not bring or continue proceedings under this regulation in respect of that decision or that part of that decision for as long as the suspension has effect.

• (4) Where paragraph (1)(a) applies, the relevant competent authority may commence civil proceedings against the OES—

• (a) for an injunction to enforce the duty in regulation 17(3A);

• (b) for specific performance of a statutory duty under section 45 of the Court of Session Act 1988; or

• (c) for any other appropriate remedy or relief.

• (5) Where paragraph (1)(b) applies, the Information Commissioner may commence civil proceedings against the RDSP—

• (a) for an injunction to enforce the duty in regulation 17(3A);

• (b) for specific performance of a statutory duty under section 45 of the Court of Session Act 1988; or

• (c) for any other appropriate remedy or relief.

• (6) No civil proceedings may be commenced under this regulation before the end of a period of 28 days beginning with the day on which the last relevant enforcement notice was served on the OES or, as the case may be, RDSP.

• (7) In this regulation, a reference to civil proceedings is a reference to proceedings, other than proceedings in respect of an offence, before a civil court in the United Kingdom.

Enforcement of penalty notices

Co-operation with the European Union

Representatives of digital service providers established outside the United Kingdom

14A

• (1) This regulation applies to any digital service provider which—

• (a) has its head office outside the United Kingdom, but which offers digital services within the United Kingdom; and

• (b) is not a small or micro enterprise as defined in Commission Recommendation 2003/361/EC.

• (2) The digital service provider must—

• (a) nominate in writing a representative in the United Kingdom; and

• (b) notify the Information Commissioner of the name and contact details of that representative.

• (3) The digital service provider must comply with paragraph (2)—

• (a) in the case of a provider which is offering digital services within the United Kingdom on the coming into force date of these regulations, within three months of the date on which these regulations come into force; or

• (b) in any other case, within three months of the provider first offering digital services in the United Kingdom.

• (4) The Information Commissioner or GCHQ may contact the representative instead of or in addition to the digital service provider for the purposes of ensuring compliance with these Regulations.

• (5) A nomination under paragraph (1) is without prejudice to any legal action which could be initiated against the nominating digital service provider.