Communications Regulation and Digital Hub Development Agency (Amendment) Act 2023

Assistance and information sharing

16. (1) The Commission may, for the purposes of exercising its functions under this Part, consult, cooperate, share information with, or obtain the assistance of—

(a) the CSIRT,

(b) a Computer Security Incident Response Team in another Member State designated pursuant to Article 9 of Directive (EU) 2016/11483 , and

(c) a national regulatory authority in another Member State to whom a task under the Directive has been assigned.

(2) The Commission shall, where appropriate, consult and cooperate with the Garda Síochána, the competent authorities designated in accordance with Regulations 7 and 8 of the European Union (Measures for a High Common Level of Security of Network and Information Systems) Regulations 2018 ( S.I. No. 360 of 2018 ), the competent authorities within the meaning of Article 8(1) of Directive (EU) 2016/11484 and the Data Protection Commission in relation to any matter concerning this Part.

(3) The Commission shall consult and cooperate with the Data Protection Commission in relation to any incident involving personal data (within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 20165 ).

(4) Information shared under this Part may include personal data.

(5) Where the Commission receives or shares information under this Part in relation to a provider the Commission shall take all reasonable steps to protect the confidentiality of the information so shared, the security of networks and services and the commercial interests of the provider to which the information relates.

3 OJ No. L194, 19.7.2016, p. 1

4 OJ No. L194, 19.7.2016, p. 1

5 OJ No. L119, 4.5.2016, p. 1