ITER/GBUnited Kingdom
What the record establishes for the United Kingdom: the bodies an insider event is reported to, the channel each takes, and what binds there instead of the Union instruments.
Recipients
| Reached under | Body | Channel | Source |
|---|---|---|---|
| Data protection authorityGDPR, article 33 | The Information Commissioner binding | — | uk gdpr art 33 |
| CSIRT or competent authorityNIS2, article 23 | The designated competent authority for the operator, under regulation 11 binding | In writing, to the designated competent authority. The regulation names no portal, and none is recorded here | uk nis regulations 2018 |
| Financial supervisorDORA, article 19 | No recipient recorded. | ||
| Market authorityMAR, article 17 | No recipient recorded. | ||
Instead of the Union instruments
The Union instruments do not bind in the United Kingdom. What binds instead is read here, one row per instrument.
| Instead of | Act | Term | Owed to | In force | Source |
|---|---|---|---|---|---|
| GDPR | UK GDPR, article 33, as retained in United Kingdom law binding | 72 hours · from having become aware of the breach | The Commissioner | Retained on 31 December 2020; the version read is the one revised to 4 September 2026 | uk gdpr art 33 |
| NIS2 | The Network and Information Systems Regulations 2018, regulation 11 binding | 72 hours · from the operator being aware that a NIS incident has occurred | The designated competent authority for the operator, in writing | 10 May 2018 | uk nis regulations 2018 |
| DORA | None read. The Regulation was adopted after the United Kingdom left the Union and was not retained | — | — | Does not apply | — |
| MAR | UK MAR, article 17, as retained in United Kingdom law binding | As soon as possible · from the information being inside information | The public, and the FCA immediately after disclosure where disclosure was delayed | Retained on 31 December 2020; the version read is the one revised to 3 September 2026 | uk mar art 17 |
An event in the United Kingdom
The five types, each opened on this jurisdiction: the acts it obliges, the term on each, and where the report goes.