natgillin/translations-raw huggingface dataset:
providing Member States with support in addressing cross-border incidents on the basis of their voluntary mutual assistance;
državam članicam zagotavlja podporo pri obravnavi čezmejnih incidentov na podlagi njihove prostovoljne medsebojne pomoči;
discussing, exploring and identifying further forms of operational cooperation, including in relation to:
obravnava, preučuje in določa nadaljnje oblike operativnega sodelovanja, tudi glede:
categories of risks and incidents;
kategorij tveganj in incidentov;
early warnings;
zgodnjega opozarjanja;
mutual assistance;
medsebojne pomoči;
principles and modalities for coordination, when Member States respond to cross-border risks and incidents;
načel in načinov usklajevanja pri odzivanju držav članic na čezmejna tveganja in incidente;
informing the Cooperation Group of its activities and of the further forms of operational cooperation discussed pursuant to point (f), and requesting guidance in that regard;
skupino za sodelovanje obvešča o svojih dejavnostih in nadaljnjih oblikah operativnega sodelovanja, obravnavanih v skladu s točko (f), ter zaprosi za usmeritve v zvezi s tem;
discussing lessons learnt from exercises relating to the security of network and information systems, including from those organised by ENISA;
obravnava izkušnje, pridobljene pri vajah v zvezi z varnostjo omrežij in informacijskih sistemov, tudi tistih, ki jih organizira ENISA;
at the request of an individual CSIRT, discussing the capabilities and preparedness of that CSIRT;
na prošnjo posamezne skupine CSIRT obravnava njene zmogljivosti in pripravljenost;
issuing guidelines in order to facilitate the convergence of operational practices with regard to the application of the provisions of this Article concerning operational cooperation.
izdaja smernice, da olajša konvergenco operativnih praks glede uporabe določb tega člena v zvezi z operativnim sodelovanjem.
For the purpose of the review referred to in Article 23 and by 9 August 2018, and every year and a half thereafter, the CSIRTs network shall produce a report assessing the experience gained with the operational cooperation, including conclusions and recommendations, pursued under this Article.
Mreža skupin CSIRT za namene pregleda iz člena 23 do 9. avgusta 2018 ter vsako leto in pol zatem pripravi poročilo, v katerem oceni izkušnje, pridobljene z operativnim sodelovanjem na podlagi tega člena, vključno s sklepi in priporočili.
That report shall also be submitted to the Cooperation Group.
To poročilo se predloži tudi skupini za sodelovanje.
The CSIRTs network shall lay down its own rules of procedure.
Mreža skupin CSIRT določi svoj poslovnik.
The Union may conclude international agreements, in accordance with Article 218 TFEU, with third countries or international organisations, allowing and organising their participation in some activities of the Cooperation Group.
Unija lahko v skladu s členom 218 PDEU sklene mednarodne sporazume s tretjimi državami ali mednarodnimi organizacijami, ki omogočajo in urejajo njihovo sodelovanje pri nekaterih dejavnostih skupine za sodelovanje.
Such agreements shall take into account the need to ensure adequate protection of data.
V takih sporazumih se upošteva potreba po zagotavljanju ustreznega varstva podatkov.
SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF OPERATORS OF ESSENTIAL SERVICES
VARNOST OMREŽJA IN INFORMACIJSKIH SISTEMOV IZVAJALCEV BISTVENIH STORITEV
Security requirements and incident notification
Varnostne zahteve in priglasitev incidentov
Member States shall ensure that operators of essential services take appropriate and proportionate technical and organisational measures to manage the risks posed to the security of network and information systems which they use in their operations.
Države članice zagotovijo, da izvajalci bistvenih storitev sprejmejo ustrezne in sorazmerne tehnične in organizacijske ukrepe za obvladovanje tveganj za varnost omrežij in informacijskih sistemov, ki jih uporabljajo pri svojih dejavnostih.
Having regard to the state of the art, those measures shall ensure a level of security of network and information systems appropriate to the risk posed.
Ob upoštevanju stanja tehnike se s temi ukrepi zagotovi raven varnosti omrežij in informacijskih sistemov, primerna obstoječemu tveganju.
Member States shall ensure that operators of essential services take appropriate measures to prevent and minimise the impact of incidents affecting the security of the network and information systems used for the provision of such essential services, with a view to ensuring the continuity of those services.
Države članice zagotovijo, da izvajalci bistvenih storitev sprejmejo ustrezne ukrepe za preprečitev in zmanjšanje vpliva incidentov, ki vplivajo na varnost tistih omrežij in informacijskih sistemov, ki se uporabljajo za zagotavljanje takšnih bistvenih storitev, da bi zagotovili neprekinjeno izvajanje teh storitev.
Member States shall ensure that operators of essential services notify, without undue delay, the competent authority or the CSIRT of incidents having a significant impact on the continuity of the essential services they provide.
Države članice zagotovijo, da izvajalci bistvenih storitev pristojnemu organu ali skupini CSIRT brez nepotrebnega odlašanja priglasijo incidente s pomembnim vplivom na neprekinjeno izvajanje bistvenih storitev, ki jih zagotavljajo.
Notifications shall include information enabling the competent authority or the CSIRT to determine any cross-border impact of the incident.
Priglasitev zajema informacije, na podlagi katerih lahko pristojni organ ali skupina CSIRT določi morebiten čezmejni vpliv incidenta.
Notification shall not make the notifying party subject to increased liability.
Priglasitev ne sme nalagati priglasitelju dodatne odgovornosti.
In order to determine the significance of the impact of an incident, the following parameters in particular shall be taken into account:
Da bi določili, kako pomemben je vpliv incidenta, se upoštevajo zlasti naslednji parametri:
the number of users affected by the disruption of the essential service;
število uporabnikov, ki jih je prizadela motnja pri zagotavljanju bistvene storitve;
the geographical spread with regard to the area affected by the incident.
geografska razširjenost, kar zadeva območje, na katerega vpliva incident.
On the basis of the information provided in the notification by the operator of essential services, the competent authority or the CSIRT shall inform the other affected Member State(s) if the incident has a significant impact on the continuity of essential services in that Member State.
Pristojni organ ali skupina CSIRT na podlagi informacij, ki jih v priglasitvi zagotovi izvajalec bistvenih storitev, obvesti drugo prizadeto državo članico oziroma države članice, če ima incident pomemben vpliv na neprekinjenost izvajanja bistvenih storitev v tej državi članici.
In so doing, the competent authority or the CSIRT shall, in accordance with Union law or national legislation that complies with Union law, preserve the security and commercial interests of the operator of essential services, as well as the confidentiality of the information provided in its notification.
Pristojni organ ali skupina CSIRT pri tem v skladu s pravom Unije ali nacionalno zakonodajo, ki je skladna s pravom Unije, zaščiti varnost in poslovne interese izvajalca bistvenih storitev ter zaupnost informacij, ki jih slednji zagotovi v svoji priglasitvi.
Where the circumstances allow, the competent authority or the CSIRT shall provide the notifying operator of essential services with relevant information regarding the follow-up of its notification, such as information that could support the effective incident handling.
Kadar okoliščine omogočajo, pristojni organ ali skupina CSIRT izvajalcu bistvenih storitev, ki priglasi incident, predloži ustrezne informacije glede nadaljnjih ukrepov na podlagi njegove priglasitve, na primer informacije, ki bi lahko prispevale k učinkovitemu obvladovanju incidentov.
At the request of the competent authority or the CSIRT, the single point of contact shall forward notifications as referred to in the first subparagraph to single points of contact of other affected Member States.
Enotna kontaktna točka na zahtevo pristojnega organa ali skupine CSIRT priglasitve iz prvega pododstavka posreduje enotnim kontaktnim točkam drugih prizadetih držav članic.
After consulting the notifying operator of essential services, the competent authority or the CSIRT may inform the public about individual incidents, where public awareness is necessary in order to prevent an incident or to deal with an ongoing incident.
Pristojni organ ali skupina CSIRT lahko po posvetovanju z izvajalcem bistvenih storitev, ki je priglasil incident, obvesti javnost o posameznih incidentih, kadar je ozaveščenost javnosti potrebna za preprečitev incidenta ali obravnavo incidenta, ki je v teku.
Competent authorities acting together within the Cooperation Group may develop and adopt guidelines concerning the circumstances in which operators of essential services are required to notify incidents, including on the parameters to determine the significance of the impact of an incident as referred to in paragraph 4.
Pristojni organi, ki sodelujejo v okviru skupine za sodelovanje, lahko oblikujejo in sprejmejo smernice o okoliščinah, v katerih morajo izvajalci bistvenih storitev priglasiti incidente, vključno s parametri iz odstavka 4, na podlagi katerih se določi, kako pomemben je vpliv incidenta.
Member States shall ensure that the competent authorities have the necessary powers and means to assess the compliance of operators of essential services with their obligations under Article 14 and the effects thereof on the security of network and information systems.
Države članice zagotovijo, da imajo pristojni organi potrebna pooblastila in sredstva, da ocenijo, ali izvajalci bistvenih storitev izpolnjujejo obveznosti iz člena 14 ter s tem povezane posledice za varnost omrežij in informacijskih sistemov.
Member States shall ensure that the competent authorities have the powers and means to require operators of essential services to provide:
Države članice zagotovijo, da ima pristojni organ pooblastila in sredstva, da od izvajalcev bistvenih storitev zahteva, da predložijo:
the information necessary to assess the security of their network and information systems, including documented security policies;
informacije, potrebne za oceno varnosti njihovih omrežij in informacijskih sistemov, vključno z dokumentiranimi varnostnimi pravili;
evidence of the effective implementation of security policies, such as the results of a security audit carried out by the competent authority or a qualified auditor and, in the latter case, to make the results thereof, including the underlying evidence, available to the competent authority.
dokaze o učinkovitem izvajanju varnostnih pravil, na primer rezultate pregleda varnosti, ki ga izvede pristojni organ ali kvalificiran revizor, pri čemer dajo v primeru pregleda s strani kvalificiranega revizorja rezultate, vključno z ustreznimi dokazi, na voljo pristojnemu organu.
When requesting such information or evidence, the competent authority shall state the purpose of the request and specify what information is required.
Kadar zahtevajo take informacije ali dokaze, pristojni organi navedejo namen zahteve in opredelijo, katere informacije so potrebne.
Following the assessment of information or results of security audits referred to in paragraph 2, the competent authority may issue binding instructions to the operators of essential services to remedy the deficiencies identified.
Pristojni organ lahko po oceni informacij ali rezultatov pregledov varnosti iz odstavka 2 izvajalcem bistvenih storitev da zavezujoča navodila za odpravo ugotovljenih pomanjkljivosti.
The competent authority shall work in close cooperation with data protection authorities when addressing incidents resulting in personal data breaches.
Pristojni organ pri obravnavi incidentov, katerih posledica je kršitev varstva osebnih podatkov, tesno sodeluje z organi za varstvo podatkov.
SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF DIGITAL SERVICE PROVIDERS
VARNOST OMREŽJA IN INFORMACIJSKIH SISTEMOV PONUDNIKOV DIGITALNIH STORITEV
Member States shall ensure that digital service providers identify and take appropriate and proportionate technical and organisational measures to manage the risks posed to the security of network and information systems which they use in the context of offering services referred to in Annex III within the Union.
Države članice zagotovijo, da ponudniki digitalnih storitev določijo in sprejmejo ustrezne in sorazmerne tehnične in organizacijske ukrepe za obvladovanje tveganj za varnost omrežij in informacijskih sistemov, ki jih uporabljajo pri zagotavljanju storitev iz Priloge III v Uniji.
Having regard to the state of the art, those measures shall ensure a level of security of network and information systems appropriate to the risk posed, and shall take into account the following elements:
Ob upoštevanju stanja tehnike se s temi ukrepi zagotovi raven varnosti omrežij in informacijskih sistemov, primerna obstoječemu tveganju, in upoštevajo naslednji elementi:
the security of systems and facilities;
varnost sistemov in zmogljivosti;
incident handling;
obvladovanje incidentov;
business continuity management;
upravljanje neprekinjenega poslovanja;
monitoring, auditing and testing;
spremljanje, revidiranje in preizkušanje;
compliance with international standards.
skladnost z mednarodnimi standardi.
Member States shall ensure that digital service providers take measures to prevent and minimise the impact of incidents affecting the security of their network and information systems on the services referred to in Annex III that are offered within the Union, with a view to ensuring the continuity of those services.
Države članice zagotovijo, da ponudniki digitalnih storitev sprejmejo ukrepe za preprečitev in zmanjšanje vpliva incidentov, ki ogrožajo varnost njihovih omrežij in informacijskih sistemov, na storitve iz Priloge III, ki se zagotavljajo v Uniji, da bi zagotovili neprekinjeno izvajanje teh storitev.
Member States shall ensure that digital service providers notify the competent authority or the CSIRT without undue delay of any incident having a substantial impact on the provision of a service as referred to in Annex III that they offer within the Union.
Države članice zagotovijo, da ponudniki digitalnih storitev vsak incident, ki ima pomemben vpliv na zagotavljanje storitve iz Priloge III, ki jo ponujajo v Uniji, brez nepotrebnega odlašanja priglasijo pristojnemu organu ali skupini CSIRT.
Notifications shall include information to enable the competent authority or the CSIRT to determine the significance of any cross-border impact.
Priglasitev zajema informacije, na podlagi katerih lahko pristojni organ ali skupina CSIRT določi pomembnost morebitnega čezmejnega vpliva.
In order to determine whether the impact of an incident is substantial, the following parameters in particular shall be taken into account:
Pri določitvi stopnje vpliva incidenta se upoštevajo zlasti naslednji parametri:
the number of users affected by the incident, in particular users relying on the service for the provision of their own services;
število uporabnikov, na katere vpliva incident, zlasti uporabnikov, ki so odvisni od storitve pri zagotavljanju lastnih storitev;
the geographical spread with regard to the area affected by the incident;
geografska razširjenost, kar zadeva območje, na katerega vpliva incident;
the extent of the disruption of the functioning of the service;
v kakšnem obsegu je moteno delovanje storitve;
the extent of the impact on economic and societal activities.
obseg vpliva na gospodarske in družbene dejavnosti.
The obligation to notify an incident shall only apply where the digital service provider has access to the information needed to assess the impact of an incident against the parameters referred to in the first subparagraph.
Obveznost priglasitve incidenta velja le, kadar ima ponudnik digitalnih storitev dostop do informacij, potrebnih za oceno vpliva incidenta glede na parametre iz prvega pododstavka.
Where an operator of essential services relies on a third-party digital service provider for the provision of a service which is essential for the maintenance of critical societal and economic activities, any significant impact on the continuity of the essential services due to an incident affecting the digital service provider shall be notified by that operator.
Kadar je izvajalec bistvenih storitev pri zagotavljanju storitve, ki je bistvena za ohranitev ključnih družbenih in gospodarskih dejavnosti, odvisen od tretjega ponudnika digitalnih storitev, ta izvajalec priglasi vsak znaten vpliv na neprekinjeno izvajanje bistvenih storitev, ki je posledica incidenta, ki vpliva na ponudnika digitalnih storitev.
Where appropriate, and in particular if the incident referred to in paragraph 3 concerns two or more Member States, the competent authority or the CSIRT shall inform the other affected Member States.
Kadar je to ustrezno in zlasti če incident iz odstavka 3 zadeva dve ali več držav članic, pristojni organ ali skupina CSIRT obvesti druge prizadete države članice.
In so doing, the competent authorities, CSIRTs and single points of contact shall, in accordance with Union law, or national legislation that complies with Union law, preserve the digital service provider's security and commercial interests as well as the confidentiality of the information provided.
Pristojni organi, skupine CSIRT in enotne kontaktne točke pri tem v skladu s pravom Unije ali nacionalno zakonodajo, ki je skladna s pravom Unije, zaščitijo varnost in poslovne interese ponudnika digitalnih storitev ter zaupnost predloženih informacij.
After consulting the digital service provider concerned, the competent authority or the CSIRT and, where appropriate, the authorities or the CSIRTs of other Member States concerned may inform the public about individual incidents or require the digital service provider to do so, where public awareness is necessary in order to prevent an incident or to deal with an ongoing incident, or where disclosure of the incident is otherwise in the public interest.
Pristojni organ ali skupina CSIRT in, kadar je to ustrezno, organi ali skupine CSIRT drugih zadevnih držav članic lahko po posvetovanju z zadevnim ponudnikom digitalnih storitev obvestijo javnost o posameznih incidentih ali zahtevajo, da to stori ponudnik digitalnih storitev, kadar je ozaveščenost javnosti potrebna za preprečitev incidenta ali obravnavo incidenta, ki je v teku, ali kadar je razkritje incidenta kako drugače v javnem interesu.
The Commission shall adopt implementing acts in order to specify further the elements referred to in paragraph 1 and the parameters listed in paragraph 4 of this Article.
Komisija sprejeme izvedbene akte, da se podrobneje opredeli elemente iz odstavka 1 in parametre, navedene v odstavku 4 tega člena.
Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 22(2) by 9 August 2017.
Ti izvedbeni akti se sprejmejo v skladu s postopkom pregleda iz člena 22(2) do 9. avgusta 2017.
The Commission may adopt implementing acts laying down the formats and procedures applicable to notification requirements.
Komisija lahko sprejme izvedbene akte, s katerimi določi obliko in postopke, ki se uporabljajo za zahteve glede priglasitve.
Without prejudice to Article 1(6), Member States shall not impose any further security or notification requirements on digital service providers.
Brez poseganja v člen 1(6) države članice za ponudnike digitalnih storitev ne uvedejo nikakršnih nadaljnjih varnostnih zahtev ali zahtev glede priglasitve.
Chapter V shall not apply to micro- and small enterprises as defined in Commission Recommendation 2003/361/EC [19].
Poglavje V se ne uporablja za mikropodjetja in mala podjetja, kakor so opredeljena v Priporočilu Komisije 2003/361/ES [19].
Member States shall ensure that the competent authorities take action, if necessary, through ex post supervisory measures, when provided with evidence that a digital service provider does not meet the requirements laid down in Article 16.
Države članice zagotovijo, da pristojni organi po potrebi ukrepajo z izvajanjem naknadnih nadzornih ukrepov, kadar se jim predložijo dokazi, da ponudnik digitalnih storitev ne izpolnjuje zahtev iz člena 16.
Such evidence may be submitted by a competent authority of another Member State where the service is provided.
Takšne dokaze lahko predloži pristojni organ druge države članice, v kateri se storitev zagotavlja.
For the purposes of paragraph 1, the competent authorities shall have the necessary powers and means to require digital service providers to:
Pristojni organi imajo za namene odstavka 1 potrebna pooblastila in sredstva, da od ponudnikov digitalnih storitev zahtevajo da:
provide the information necessary to assess the security of their network and information systems, including documented security policies;
predložijo informacije, potrebne za oceno varnosti njihovega omrežja in informacijskih sistemov, vključno z dokumentiranimi varnostnimi pravili;
remedy any failure to meet the requirements laid down in Article 16.
odpravijo vsakršno neizpolnjevanje zahtev iz člena 16.
If a digital service provider has its main establishment or a representative in a Member State, but its network and information systems are located in one or more other Member States, the competent authority of the Member State of the main establishment or of the representative and the competent authorities of those other Member States shall cooperate and assist each other as necessary.
Če ima ponudnik digitalnih storitev glavni sedež ali predstavnika v eni državi članici, omrežja in informacijske sisteme pa v eni ali več drugih državah članicah, pristojni organ države članice glavnega sedeža ali predstavnika in pristojni organi teh drugih držav članic po potrebi sodelujejo in si pomagajo.
Such assistance and cooperation may cover information exchanges between the competent authorities concerned and requests to take the supervisory measures referred to in paragraph 2.
Takšna pomoč in sodelovanje lahko zajemata izmenjavo informacij med zadevnimi pristojnimi organi in zahteve za sprejem nadzornih ukrepov iz odstavka 2.
Jurisdiction and territoriality
Pristojnost in teritorialnost
For the purposes of this Directive, a digital service provider shall be deemed to be under the jurisdiction of the Member State in which it has its main establishment.
Za namene te direktive se šteje, da ponudnik digitalnih storitev sodi v pristojnost države članice, v kateri ima glavni sedež.
A digital service provider shall be deemed to have its main establishment in a Member State when it has its head office in that Member State.
Za ponudnika digitalnih storitev se šteje, da ima glavni sedež v državi članici, če ima v tej državi članici glavno upravo.
A digital service provider that is not established in the Union, but offers services referred to in Annex III within the Union, shall designate a representative in the Union.
Ponudnik digitalnih storitev, ki nima sedeža v Uniji, vendar v njej zagotavlja storitve iz Priloge III, določi predstavnika v Uniji.
The representative shall be established in one of those Member States where the services are offered.
Predstavnik ima sedež v eni od držav članic, v katerih se zagotavljajo storitve.
The digital service provider shall be deemed to be under the jurisdiction of the Member State where the representative is established.
Šteje se, da ponudnik digitalnih storitev sodi v pristojnost države članice, v kateri ima predstavnik sedež.
The designation of a representative by the digital service provider shall be without prejudice to legal actions which could be initiated against the digital service provider itself.
Določitev predstavnika s strani ponudnika digitalnih storitev ne posega v sodne postopke, ki se lahko sprožijo proti samemu ponudniku digitalnih storitev.
STANDARDISATION AND VOLUNTARY NOTIFICATION
STANDARDIZACIJA IN PROSTOVOLJNA PRIGLASITEV