Cyber Incident Reporting in the EU

We summarize different security articles in EU legislation which mandate cyber incidents and cyber security measures. In a single diagram we give an overview of Article 13a and Article 4 of the Telecom package, Article 15 of the proposed eID/eSig regulation, and articles 30, 31, and 32 of the proposed Data Protection regulation. We also look ahead to the EU Cyber security strategy and we raise a number of issues that we believe should be addressed in the near future.