10 [360] single point of contact, as the case may be, shall take all reasonable steps to protect the confidentiality of the information so shared and the network and information security and commercial interests of the operator of essential services or the digital service provider to which the information relates. Co-operation with Data Protection Commission and the Garda Siochána 6. (1) The single point of contact and a competent authority shall consult and co-operate with, including, where necessary, by sharing information with, the Data Protection Commission where the Data Protection Regulation or the Data Protection Acts 1988 to 2018 apply in relation to any matter concerning these Regulations, including in relation to an incident resulting in a personal data breach in which case the competent authority shall work in close co-operation with the Data Protection Commission in addressing the incident. (2) The single point of contact and a competent authority shall, in accordance with law, consult and co-operate with, including, where necessary, by sharing information with, the Garda Siochána in relation to any matter to which these Regulations apply. PART 2 COMPETENT AUTHORITY, SINGLE POINT OF CONTACT, CSIRT Competent authority for operators of essential services 7. (1) The Minister is for the purposes of these Regulations designated as the competent authority in the State on the security of network and information systems in respect of operators of essential services in the sectors set out in Schedule 1 other than— (a) the sector set out at number 3 of column (1) of Schedule 1, and (b) the sector set out at number 4 of column (1) of Schedule 1. (2) The Central Bank of Ireland is for the purposes of these Regulations designated as the competent authority in the State on the security of network and information systems in respect of operators of essential services in the following sectors: (i) the sector set out at number 3 of column (1) of Schedule 1 (ii) the sector set out at number 4 of column (1) of Schedule 1. (3) A competent authority referred to in paragraph (1) or (2) shall, in respect of each sector in respect of which it is designated as the competent authority— (a) review the application of these Regulations to the extent to which they apply in respect of the sector, and