The Network and Information Systems Regulations 2018

Review and report

This section has no associated Explanatory Memorandum

25.—(1) The Secretary of State must—

(a)carry out a review of the regulatory provision contained in these Regulations; and

(b)publish a report setting out the conclusions of that review.

(2) The first report must be published on or before 9th May 2020 and subsequent reports must be published at biennial intervals.

(3) Section 30(3) of the Small Business, Enterprise and Employment Act 2016 requires that a review carried out under this regulation must, so far as is reasonable, have regard to how the 2015 Directive is implemented in other Member States.

(4) Section 30(4) of Small Business, Enterprise and Employment Act 2015(1) requires that the reports published under this regulation must, in particular—

(a)set out the objectives intended to be achieved by the regulatory provision referred to in paragraph (1)(a);

(b)assess the extent to which those objectives are achieved;

(c)assess whether those objectives remain appropriate; and

(d)if those objectives remain appropriate, assess the extent to which they could be achieved in another way which involves less onerous regulatory provision.

(5) In this regulation, “regulatory provision” has the same meaning as in sections 28 to 32 of the 2015 Act.