# Commission Implementing Decision 2019/1765 of 22 October 2019 providing the rules for the establishment, the management and the functioning of the network of national authorities responsible for eHealth, and repealing Implementing Decision 2011/890/EU (notified under document C(2019) 7460) (Text with EEA relevance), Division (2): In particular, the joint controllers shall notify each other of the following:

Extent: E+W+S+N.I.

a)) any potential or actual risks to the availability, confidentiality and/or integrity of the personal data undergoing processing in the federation gateway;
b)) any security incidents that are linked to the processing operation in the federation gateway;
c)) any personal data breach, the likely consequences of the personal data breach and the assessment of the risk to the rights and freedoms of natural persons, and any measures taken to address the personal data breach and mitigate the risk to the rights and freedoms of natural persons;
d)) any breach of the technical and/or organisational safeguards of the processing operation in the federation gateway.

---
Source: https://www.legislation.gov.uk/eudn/2019/1765/annex/II/section/2/division/2 (the official version)
Page: https://openlegislation.uk/eu-decision-2019-1765/annex-II/section-2/division-2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.