Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

Article 17International cooperation

The Union may, where appropriate, conclude international agreements, in accordance with Article 218 TFEU, with third countries or international organisations, allowing and organising their participation in particular activities of the Cooperation Group, the CSIRTs network and EU-CyCLONe. Such agreements shall comply with Union data protection law.

NIS2, the European Union directive on network and information security, Article 17

The Union may, where appropriate, conclude international agreements under Article 218 TFEU with third countries or international organisations, allowing and organising their participation in particular activities of the Cooperation Group, the CSIRTs network and EU-CyCLONe. Such agreements must comply with Union data protection law.

Nothing here falls on an entity. It is the legal basis for third-country participation in the cooperation structures, with data protection law as a stated condition. It is separate from the CSIRTs’ own power in Article 10(7) and (8) to cooperate with third-country CSIRTs.

Text: Directive (EU) 2022/2555, OJ L 333, 27.12.2022, p. 80, as corrected by Corrigendum OJ L, 2023/90206, 22.12.2023 (Article 19(1): “by 17 January 2025”, replacing “on”), from EUR-Lex. Only the Official Journal text is authentic.