2.

For the purposes of paragraph 1, the competent authorities shall have the necessary powers and means to require digital service providers to: provide the information necessary to assess the security of their network and information systems, including documented security policies; remedy any failure to meet the requirements laid down in Article 16.

← art_17__para_1__text_1 · All articles · art_17__para_2__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-28 · Text as adopted (Official Journal); later amendments are not incorporated in this text.