Mr. Richard Browne:

We have not received any incident report from other member states. No member state has come to us to tell us that it has an incident that affects us. We received one incident report which was subsequently withdrawn because the entity found that it was not an incident. We are in discussions with several more digital services providers on potential incidents which they cannot yet confirm have happened. The issue in this sector is that there can often be a considerable period once a potential incident has been identified before an entity is able to state with certainty that it is actually an incident. The same issue arises in data protection.