Incident Reporting

Serious incidents must be reported to the relevant national authority within 72 hours of the provider becoming aware.

Reports must include system identification, incident description, severity assessment, and affected parties.

National competent authorities of each affected Member State must be notified individually.

Providers must submit follow-up reports with root cause analysis and corrective measures taken.