Art 23 - Reporting obligations

Article 23 requires operators of essential and important entities to notify the competent authority of incidents that significantly affect service continuity, typically within 24 hours of becoming aware of the event. The report must include details on the nature of the incident, its impact, the measures taken to contain it and any follow-up actions planned.