Important entity
An entity in scope that does not qualify as essential — typically medium-sized enterprises and entities in Annex II sectors.
Important entities carry substantially the same article 21 security obligations as essential entities, but are supervised ex post: authorities act when they have an indication of non-compliance. For infringing article 21 or 23, important entities are subject to administrative fines with a maximum of at least EUR 7,000,000 or at least 1.4% of the total worldwide annual turnover in the preceding financial year of the undertaking to which the entity belongs, whichever is higher (article 34(5)).
- Essential entity · Art. 3(1)
- Significant incident · Art. 23(3)
- Early warning · Art. 23(4)(a)
- Size-cap rule · Art. 2(1)
- CSIRT · Art. 10
- Competent authority · Art. 8