Article 9 – Significant incidents with regard to content delivery network providers

With regard to content delivery network providers, an incident shall be considered significant under Article 3 where it fulfils one or more of the following criteria:

(a) one or more of the content delivery networks is completely unavailable for more than 10 minutes;

(b) the customer service level agreement for content delivery network performance is not met for more than 5 % of the content delivery network users in the Union, or for more than 1 million of the content delivery network users in the Union, whichever number is smaller, for a duration of more than one hour;

(c) the availability of the content delivery network of a provider that has no customer service level agreement in place is impacted by the incident;

(d) the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of the content delivery network is compromised as a result of a malicious action,

(e) the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of the content delivery network is compromised with an impact on more than 5 % of the content delivery network users in the Union.