Information about withdrawal
Article 9
1. Information in a clear, comprehensive and easily accessible manner about the withdrawal of a wallet solution shall be provided, without undue delay and no later than 24 hours after the withdrawal of the wallet solution, to: (a) the single points of contact designated pursuant to Article 46c(1) of Regulation (EU) No 910/2014; (b) the Commission; (c) the wallet users affected; (d) the wallet-relying parties registered in accordance with Article 5b of Regulation (EU) No 910/2014. 2. Information provided in accordance with paragraph 1 shall include at least the following: (a) the name of the provider of the wallet solution which has been withdrawn; (b) the name and reference identifier of that wallet solution, as indicated on the list of certified wallets drawn up pursuant to Article 5d of Regulation (EU) No 910/2014, and, where applicable, the concerned versions; (c) the date and time of the detection of the security breach or compromise that led to the withdrawal of the affected wallet solution because of its severity or because it was not remedied within three months; (d) if known, the date and time when the security breach or compromise became effective, based on network or system logs or other data sources; (e) the date and time of the withdrawal of the wallet solution and of the effective revocation of the wallet unit attestations of the wallet units provided under the wallet solution; (f) whether the withdrawal is the result of the severity of the security breach or compromise or is the consequence of the security breach or compromise not being remedied; (g) contact details, including at least an email address and a telephone number for the notifying Member State, and, where different, for the wallet provider referred to in point (a); (h) a description of the security breach or compromise; (i) a description of the data compromised, including, where applicable, the categories of personal data as specified in Article 9(1) and Article 10 of Regulation (EU) 2016/679; (j) where possible, an estimate of the approximate number of wallet users affected and of other natural persons affected; (k) a description of the potential impacts on wallet-relying parties or on wallet users, and in the latter case, where relevant, any indications of measures that wallet users can take to mitigate those potential impacts; (l) a description of the measures taken or planned for transitioning wallet users affected to alternative wallet solutions or, where applicable and appropriate, alternative services.