# Commission Implementing Regulation (EU) 2020/857 of 17 June 2020 laying down the principles to be included in the contract between the European Commission and the .eu top-level domain Registry in accordance with Regulation (EU) 2019/517 of the European Parliament and of the Council (Text with EEA relevance), Article 6: Security and consumer protection

Extent: E+W+S+N.I.

1. The Registry shall ensure a high level of security for the network and information systems that it operates when managing the .eu TLD. In doing so, it shall put in place specific policies and comply with state-of-the-art cybersecurity risk management practices.
2. The Registry shall adopt a business continuity and recovery plan with prior written agreement of the Commission. The Registry shall periodically revise the plan, with the prior written agreement of the Commission.
3. The Registry shall:
(a) provide registrars and registrants with state-of-the-art tools and technologies to protect themselves against cybersecurity threats;
(b) employ advanced methodologies to prevent abusive registrations.

---
Source: https://www.legislation.gov.uk/eur/2020/857/article/6 (the official version)
Page: https://openlegislation.uk/eu-regulation-2020-857/article-6
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.

