S.L. 330.20 Art. 5Cooperation and exchange of information.

(1) In the case of receival of any major ICT-related incidents and any voluntary notifications of significant cyber threats made by credit institutions classified as significant, in accordance with Article 6(4) of Regulation (EU) No 1024/2013, the Authority shall, in terms of the third sub-paragraph of Article 19(1) and the second sub-paragraph of Article 19(2) of the DORA Regulation, immediately transmit the said reports and notifications to the European Central Bank (ECB).

(2) For the purposes of fulfilling its duties and responsibilities as set out in Article 19 of the DORA Regulation, the Authority may transmit to the national CSIRT any major ICT-related incident reports and any voluntary notifications of significant cyber threats in terms of Article 19 of the DORA Regulation.

(3) The Authority shall have the power to disclose any major ICT-related incidents reports and any voluntary notifications of significant cyber threats or any other information related thereto, to any other relevant body or authority in accordance with Article 19 of the DORA Regulation and with article 17 of the Act.