<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div><blockquote type="cite" class=""><div class="">On 3 Dec 2021, at 19:45, Patrik Fältström <<a href="mailto:patrik@frobbit.se" class="">patrik@frobbit.se</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I understand after discussing with RIPE-NCC that the situation is similar in NL. Because of this, the NIS-2 will if root servers are included not have any real impact on how RIPE-NCC or Netnod is managed.</span></div></blockquote></div><br class=""><div class="">Just to clarify to this point, our root-server operations are not under any regulatory supervision. The issue has been discussed when the current NIS directive came into force, when all our services were evaluated. But until now we have not been recognised as an operator of an essential service.</div><div class=""><br class=""></div><div class="">We do of course fall under the Dutch legislation and as such, a number of other EU directives such as GDPR appl,y and those also in certain cases come with reporting obligations and also have some paragraphs on cybersecurity related measures.</div><div class=""><br class=""></div><div class="">But as it stands, we are not formally supervised as a critical entity of some sorts.</div><div class=""><br class=""></div><div class="">MarcoH</div></body></html>