| NOTAS: | "Security incident reporting has been part of the EU’s telecom regulatory framework since the 2009 reform of the telecom package: Article 13a of the Framework Directive (2009/140/EC) came into force in 2011. The European Electronic Communications Code (EECC) (2018/1972) repeals and replaces the Framework Directive. It reinforces the provisions for reporting incidents, clarifying what incidents fall within its scope and the notification criteria. The 2020 annual summary reporting process contains reports of 170 incidents submitted by national authorities from 26 EU Member States and 2 EFTA countries. The total user hours lost, derived by multiplying for each incident the number of users and the number of hours, was 841 million user hours." |
