New EU regulation on when cybersecurity incident notifications can be delayed for security reasons
20 Apr 2026207 views
Who is affected:
Companies and entities required to report cybersecurity incidents under NIS2 regulations
Summary
The EU regulates cases where companies can defer reporting cybersecurity incidents. Strict conditions are established to justify such delays.
Detailed analysis
PRO
This Delegated Regulation complements Regulation (EU) 2024/2847 by specifying the cybersecurity-related circumstances under which incident notification disclosure can be deferred. Affected organizations must demonstrate that immediate disclosure could compromise ongoing investigations or worsen the incident's impact. O…
PRO exclusive content
Implicaciones prácticas, plazos y recomendaciones específicas para tu sector.
CELEX:32026R0881: Reglamento Delegado (UE) 2026/881 de la Comisión, de 11 de diciembre de 2025, por el que se completa el Reglamento (UE) 2024/2847 del Parlamento Europeo y del Consejo mediante la especificación de las condiciones de aplicación de los motivos relacionados con la ciberseguridad en lo que respecta al aplazamiento de la difusión de notificaciones
Publication in the Official Journal of the European Union of a community legal provision. The specific content requires direct consultation of the official text...
To be determined according to the content of the official text
The EU sets how the European Banking Authority will calculate and charge fees for validating proforma compensation models for derivatives. It affects financial ...
Financial entities and counterparties subject to EMIR that use proforma models for OTC derivatives
The EU incorporates UN Regulation No. 100 which establishes uniform technical requirements for homologating vehicles with electric motors. It affects manufactur...
Manufacturers, importers and homologators of electric and plug-in hybrid vehicles
The EU corrects a drafting error in the Euro 5 and Euro 6 emissions type-approval regulation. The change affects a sentence on durability testing of pollution c...
Light-duty vehicle manufacturers and EU type-approval authorities