rec_264

Directive (EU) 2018/1972 of the European Parliament and of the Council of 11 December 2018 establishing the European Electronic Communications Code (Recast) (Text with EEA relevance) · European Union

(264) Without prejudice to the substantive obligation on the provider related to security by virtue of this Directive, the contract should specify the type of action the provider might take in the case of security incidents, threats or vulnerabilities. In addition, the contract should also specify any compensation and refund arrangements available if a provider responds inadequately to a security incident, including if a security incident, notified to the provider, takes place due to known software or hardware vulnerabilities, for which patches have been issued by the manufacturer or developer and the service provider has not applied those patches or taken any other appropriate counter-measure.

← rec_263 · All articles · rec_265 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-28 · Text as adopted (Official Journal); later amendments are not incorporated in this text.