Art. 14(3)

Deception that affects the authenticity or integrity of important data or functions meets the Art. 14(5)(a) severe-incident threshold and triggers the 14(3) notification obligation to the CSIRT-coordinator and ENISA.

Disruption that negatively affects the availability of important functions meets the 14(5)(a) severe-incident threshold and triggers manufacturer notification obligations under 14(3).

Denial that eliminates the availability of important functions meets the 14(5)(a) severe-incident threshold; the manufacturer must notify CSIRT-coordinator and ENISA per 14(3).

Permanent degradation of an essential function meets the 14(5)(a) severe-incident threshold for availability impact and triggers 14(3) notification obligations.

Destruction of data or functions is a clear severe-incident case under Art. 14(5)(a) — it eliminates availability and may also affect integrity — triggering the manufacturer's 14(3) notification obligations.

Theft of mission-critical data affects confidentiality of important data — meeting the 14(5)(a) severe-incident threshold and triggering the manufacturer's 14(3) notification obligations.