OpenLegislation

Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance) (revoked)

EU Regulation 2019/881 · Adopted 17 April 2019 · Extends to United Kingdom

Original text. legislation.gov.uk does not revise this item, so later amendments are not shown here. Changes made to it are listed under each provision when known.

Regulation (EU) 2019/881 of the European Parliament and of the Council

of 17 April 2019

on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act)

(Text with EEA relevance) (revoked)

F1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Annotations to the whole text

Textual amendments

F1

Regulation revoked (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) (No. 2) Regulations 2019 (S.I. 2019/1444), regs. 1(2), 3; 2020 c. 1, Sch. 5 para. 1(1)

Contents

  1. Title I: GENERAL PROVISIONS Repealed
  2. 1Subject matter and scope Repealed
  3. 2Definitions Repealed
  4. Title II: ENISA (THE EUROPEAN UNION AGENCY FOR CYBERSECURITY) Repealed
  5. Chapter I: Mandate and objectives Repealed
  6. 3Mandate Repealed
  7. 4Objectives Repealed
  8. Chapter II: Tasks Repealed
  9. 5Development and implementation of Union policy and law Repealed
  10. 6Capacity-building Repealed
  11. 7Operational cooperation at Union level Repealed
  12. 8Market, cybersecurity certification, and standardisation Repealed
  13. 9Knowledge and information Repealed
  14. 10Awareness-raising and education Repealed
  15. 11Research and innovation Repealed
  16. 12International cooperation Repealed
  17. Chapter III: Organisation of ENISA Repealed
  18. 13Structure of ENISA Repealed
  19. Management Board Repealed
  20. 14Composition of the Management Board Repealed
  21. 15Functions of the Management Board Repealed
  22. 16Chairperson of the Management Board Repealed
  23. 17Meetings of the Management Board Repealed
  24. 18Voting rules of the Management Board Repealed
  25. Executive Board Repealed
  26. 19Executive Board Repealed
  27. Executive Director Repealed
  28. 20Duties of the Executive Director Repealed
  29. ENISA Advisory Group, Stakeholder Cybersecurity Certification Group and National Liaison Officers Network Repealed
  30. 21ENISA Advisory Group Repealed
  31. 22Stakeholder Cybersecurity Certification Group Repealed
  32. 23National Liaison Officers Network Repealed
  33. Operation Repealed
  34. 24Single programming document Repealed
  35. 25Declaration of interests Repealed
  36. 26Transparency Repealed
  37. 27Confidentiality Repealed
  38. 28Access to documents Repealed
  39. Chapter IV: Establishment and structure of ENISA’s budget Repealed
  40. 29Establishment of ENISA’s budget Repealed
  41. 30Structure of ENISA’s budget Repealed
  42. 31Implementation of ENISA’s budget Repealed
  43. 32Financial rules Repealed
  44. 33Combating fraud Repealed
  45. Chapter V: Staff Repealed
  46. 34General provisions Repealed
  47. 35Privileges and immunity Repealed
  48. 36Executive Director Repealed
  49. 37Seconded national experts and other staff Repealed
  50. Chapter VI: General provisions concerning ENISA Repealed
  51. 38Legal status of ENISA Repealed
  52. 39Liability of ENISA Repealed
  53. 40Language arrangements Repealed
  54. 41Protection of personal data Repealed
  55. 42Cooperation with third countries and international organisations Repealed
  56. 43Security rules on the protection of sensitive non-classified information and classified information Repealed
  57. 44Headquarters Agreement and operating conditions Repealed
  58. 45Administrative control Repealed
  59. Title III: CYBERSECURITY CERTIFICATION FRAMEWORK Repealed
  60. 46European cybersecurity certification framework Repealed
  61. 47The Union rolling work programme for European cybersecurity certification Repealed
  62. 48Request for a European cybersecurity certification scheme Repealed
  63. 49Preparation, adoption and review of a European cybersecurity certification scheme Repealed
  64. 50Website on European cybersecurity certification schemes Repealed
  65. 51Security objectives of European cybersecurity certification schemes Repealed
  66. 52Assurance levels of European cybersecurity certification schemes Repealed
  67. 53Conformity self-assessment Repealed
  68. 54Elements of European cybersecurity certification schemes Repealed
  69. 55Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes Repealed
  70. 56Cybersecurity certification Repealed
  71. 57National cybersecurity certification schemes and certificates Repealed
  72. 58National cybersecurity certification authorities Repealed
  73. 59Peer review Repealed
  74. 60Conformity assessment bodies Repealed
  75. 61Notification Repealed
  76. 62European Cybersecurity Certification Group Repealed
  77. 63Right to lodge a complaint Repealed
  78. 64Right to an effective judicial remedy Repealed
  79. 65Penalties Repealed
  80. Title IV: FINAL PROVISIONS Repealed
  81. 66Committee procedure Repealed
  82. 67Evaluation and review Repealed
  83. 68Repeal and succession Repealed
  84. 69Entry into force Repealed
  85. Signature
  86. Annex REQUIREMENTS TO BE MET BY CONFORMITY ASSESSMENT BODIES Repealed

1Subject matter and scopeF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2DefinitionsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3MandateF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

4ObjectivesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5Development and implementation of Union policy and lawF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

6Capacity-buildingF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

7Operational cooperation at Union levelF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8Market, cybersecurity certification, and standardisationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

9Knowledge and informationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

10Awareness-raising and educationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

11Research and innovationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

12International cooperationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

13Structure of ENISAF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

14Composition of the Management BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

15Functions of the Management BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

16Chairperson of the Management BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

17Meetings of the Management BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

18Voting rules of the Management BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

19Executive BoardF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

20Duties of the Executive DirectorF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

21ENISA Advisory GroupF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

22Stakeholder Cybersecurity Certification GroupF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

23National Liaison Officers NetworkF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

24Single programming documentF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

25Declaration of interestsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

26TransparencyF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

27ConfidentialityF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

28Access to documentsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

29Establishment of ENISA’s budgetF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

30Structure of ENISA’s budgetF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

31Implementation of ENISA’s budgetF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

32Financial rulesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

33Combating fraudF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

34General provisionsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

35Privileges and immunityF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

36Executive DirectorF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

37Seconded national experts and other staffF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

38Legal status of ENISAF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

39Liability of ENISAF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

40Language arrangementsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

41Protection of personal dataF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

42Cooperation with third countries and international organisationsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

43Security rules on the protection of sensitive non-classified information and classified informationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

44Headquarters Agreement and operating conditionsF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

45Administrative controlF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

46European cybersecurity certification frameworkF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

47The Union rolling work programme for European cybersecurity certificationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

48Request for a European cybersecurity certification schemeF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

49Preparation, adoption and review of a European cybersecurity certification schemeF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

50Website on European cybersecurity certification schemesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

51Security objectives of European cybersecurity certification schemesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

52Assurance levels of European cybersecurity certification schemesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

53Conformity self-assessmentF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

54Elements of European cybersecurity certification schemesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

55Supplementary cybersecurity information for certified ICT products, ICT services and ICT processesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

56Cybersecurity certificationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

57National cybersecurity certification schemes and certificatesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

58National cybersecurity certification authoritiesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

59Peer reviewF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

60Conformity assessment bodiesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

61NotificationF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

62European Cybersecurity Certification GroupF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

63Right to lodge a complaintF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

64Right to an effective judicial remedyF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

65PenaltiesF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

66Committee procedureF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

67Evaluation and reviewF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

68Repeal and successionF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

69Entry into forceF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Signature

F1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

REQUIREMENTS TO BE MET BY CONFORMITY ASSESSMENT BODIESF1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .