(3) An operator of an information or communication system of a critical information infrastructure, or an operator of an important information system commits an offence by not informing the administrator of the system according to Section 4a, paragraph 1. (4) An operator and an administrator of an information or communication system of a critical information infrastructure commits an offence by not informing an entity operating an electronic communications network according to Section 4a, paragraph 2. (5) An administrator of an information or communication system of a critical information infrastructure commits an offence by: a) Not fulfilling the obligation imposed by the Agency’s decision according to Section 15a, paragraph 1 b) Not transferring data, operational data and information according to Section 6a, paragraph 2 c) Not transferring data, operational data and information according to Section 6a, paragraph 3 d) Not destroying copies of data, operational data and information according to Section 6a, paragraph 3 or e) Not allowing the operator to supervise the destruction of data, operational data and information according to Section 6a, paragraph 3 (6) A public authority or legal or natural person administrating an important network commits an offence by not reporting a cyber security incident according to Section 8, paragraphs 1 and 3. (7) An operator and an administrator of an information system of essential service commits an offence by: a) Not introducing or implementing security measures, or not keeping security documentation records contrary to Section 4, paragraph 2 b) Not reporting a cyber security incident according to Section 8, paragraphs 1 and 4 c) Not fulfilling the obligation imposed by the Agency to inform the public according to Section 12, paragraph 3 d) Not fulfilling an obligation imposed by the Agency according to Section 13 or 14 e) Not notifying the Agency of the contact details or a change to them according to Section 16, paragraph 2 letter b) or f) Not fulfilling all of the obligations imposed under a corrective measure according to Section 24 (8) An operator and an administrator of an information or communication system of a critical information infrastructure, or an operator and an administrator of an important information system, an operator and an administrator of an information system of essential service and an operator of an essential service that executes public powers commits an offence by concluding a contract with a provider of cloud computing services contrary to Section 4, paragraph 5. (9) An operator and an administrator of an information or communication system of a critical information infrastructure commits an offence by not fulfilling their obligation to inform the public imposed by the Agency according to Section 12, paragraph 3.