Additional obligations
Article 7
Legal entities in their quality as holders, owners or end users of vehicles subject to the data exchange of this Directive shall have the right to obtain information on the processing of their data. Member States shall inform each other on cybersecurity incidents, notified pursuant to Article 23 of Directive (EU) 2022/2555 of the European Parliament and of the Council ( 17 ), where the incidents relate to data stored in virtual or physical clouds or cloud-hosting services.