European Regulations DOUE Importance: 7/10

New EU regulation on when cybersecurity incident notifications can be delayed for security reasons

20 Apr 2026 91 views
Who is affected:
Companies and entities required to report cybersecurity incidents under NIS2 regulations

Summary

The EU regulates cases where companies can defer reporting cybersecurity incidents. Strict conditions are established to justify such delays.

Detailed analysis PRO

This Delegated Regulation complements Regulation (EU) 2024/2847 by specifying the cybersecurity-related circumstances under which incident notification disclosure can be deferred. Affected organizations must demonstrate that immediate disclosure could compromise ongoing investigations or worsen the incident's impact. O…

PRO exclusive content

Implicaciones prácticas, plazos y recomendaciones específicas para tu sector.

Crear cuenta gratis Ver planes PRO

Full official title

CELEX:32026R0881: Reglamento Delegado (UE) 2026/881 de la Comisión, de 11 de diciembre de 2025, por el que se completa el Reglamento (UE) 2024/2847 del Parlamento Europeo y del Consejo mediante la especificación de las condiciones de aplicación de los motivos relacionados con la ciberseguridad en lo que respecta al aplazamiento de la difusión de notificaciones

View original source (DOUE)

Affected sectors

SMEs Technology Healthcare Transport

Categories

Tax & Revenue Labour & Employment Corporate & Business Data Protection Social Security European Regulations Grants & Subsidies Other Regulations Public Sector Education Energy Agriculture & Fisheries Real Estate

PRO Plan

Alerts, detailed analysis and private Telegram channel.

From 9.99 EUR/month

Related regulations