S.L. 460.41 Art. 24Registry of entities. 41 42 [S.L.

(1) DNS service providers, TLD name registries, entities providing domain name registration services, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, as well as providers of online marketplaces, of online search engines and of social networking services platforms shall submit to the CIP Department, by the prescribed date, the following information:

(a) the name of the entity;

(b) the relevant sector, sub-sector and type of entity in the First or Second Schedule, where applicable;

(c) the address of the entity’s main establishment and its other legal establishments in the Union or, if not established in the Union, of its representative designated pursuant to article 23(3);

(d) up-to-date contact details, including email addresses and telephone numbers of the entity and, where applicable, its representative designated pursuant to article 23(3);

(e) the Member States where the entity provides services;

(f) the entity’s IP ranges; and

(g) a detailed list of computer, network and operational technology resources used.

(2) The entities in sub-article (1) shall notify the CIP Department about any changes to the information they submitted without delay and in any event within three (3) months of the date of the change:

Provided that the entity shall provide information in accordance with sub-article (1)(g) to the CIP Department upon request.

(3) Upon receipt of the information provided for in sub-articles (1) and (2), except for that provided for in sub-articles (1)(f) and (g), the CIP Department shall, without undue delay, forward such information to ENISA.

(4) Where applicable, the information provided for in sub-articles (1) and (2) shall be submitted through the national self-registration mechanism provided for in sub-article 7(3).

(5) By 17 April 2025 and every two (2) years thereafter, the CIP Department shall notify:

(a) the European Commission and the Cooperation Group of the number of essential and important entities listed pursuant to article 7(2)(i) for each sector and sub-sector in the First or Second Schedule; and

(b) the European Commission of relevant information about the number of essential and important entities identified pursuant to sub-articles (1)(b) to (e), the sector and sub-sector provided for in the First or Second Schedule to which they belong, the type of service that they provide, and the provision, from among those established in sub-articles (1)(b) to (e), pursuant to which they were identified. CYBERSECURITY ACROSS THE EUROPEAN UNION 460.41 (MALTA)

(6) Until 17 April 2025 and upon request of the European Commission, Malta may notify the European Commission of the names of the essential and important entities provided for in sub-article (5)(b).