Document Generated: 2022-06-22 Status: This is the original version (as it was originally made). by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact(17). Co-operation and action across Member State boundaries 13.—(1) The Information Commissioner must co-operate with, and assist, competent authorities in other Member States, if the Commissioner considers that is appropriate to secure the effective supervision of— (a) RDSPs who have network and information systems located in another Member State; or (b) digital service providers who do not meet the condition mentioned in regulation 1(3)(e)(i) but have network and information systems located in the United Kingdom. (2) The co-operation and assistance referred to in paragraph (1) may include— (a) sharing information with, and receiving information from, a competent authority in another Member State to the extent that the Information Commissioner considers it necessary and appropriate; (b) receiving a request from a competent authority in another Member State for the Information Commissioner to take enforcement action with respect to a RDSP mentioned in paragraph (1)(a); and (c) making a request to a competent authority in another Member State for enforcement action to be taken with respect to a digital service provider mentioned in paragraph (1)(b). Registration with the Information Commissioner 14.—(1) The Information Commissioner must maintain a register of all RDSPs that have been notified to it. (2) A RDSP must submit the following details to the Information Commissioner before the registration date for the purpose of maintaining the register mentioned in paragraph (1)— (a) the name of the RDSP; (b) the address of its head office, or of its nominated representative; and (c) up-to-date contact details (including email addresses and telephone numbers). (3) A RDSP must notify the Information Commissioner about any changes to the details it submitted under paragraph (2) as soon as possible, and in any event within three months of the date on which the change took effect. (4) In this regulation, the “registration date” means— (a) 1st November 2018, in the case of a RDSP who satisfies the conditions mentioned in regulation 1(3)(e) on the coming into force date of these Regulations, or (b) in any other case, the date three months after the RDSP satisfies those conditions. (17) OJ No. L 26, 31.1.2018, p. 48. 13