Regulation 6 Information sharing – enforcement authorities
The NIS enforcement authorities may share information with F1each other, relevant law-enforcement authorities, the CSIRT, F2and public authorities in the EU if that information sharing is—
necessary for—
the purposes of these Regulations or of facilitating the performance of any functions of a NIS enforcement authority under or by virtue of these Regulations or any other enactment;
national security purposes; or
purposes related to the prevention or detection of crime, the investigation of an offence or the conduct of a prosecution;
limited to information which is relevant and proportionate to the purpose of the information sharing.
Information shared under paragraph (1) may not be further shared by the person with whom it is shared under that paragraph for any purpose other than a purpose mentioned in that paragraph unless otherwise agreed by the NIS enforcement authority.
When sharing information with F5a public authority in the EU under paragraph (1), the NIS enforcement authorities are not required to share—
confidential information, or
information which may prejudice the security or commercial interests of operators of essential services or digital service providers.
Annotations
Textual amendments
- F1
Words in reg. 6(1) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 4(a)(i) (with reg. 21)
- F2
Words in reg. 6(1) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 7(a); 2020 c. 1, Sch. 5 para. 1(1)
- F3
Reg. 6(1)(a) substituted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 4(a)(ii) (with reg. 21)
- F4
Reg. 6(1A) inserted (31.12.2020) by The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 (S.I. 2020/1245), regs. 1(1), 4(b) (with reg. 21)
- F5
Words in reg. 6(2) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 7(b); 2020 c. 1, Sch. 5 para. 1(1)