Dear Registrar,
We are writing to you in order to inform you about a frequently asked question regarding the public email address for companies, which will be disclosed from October 1st. This question highlights the importance of registrants fully understanding the consequences of their chosen email address.
Consequences of not changing email address for NIS2 compliance
If the chosen email address contains personal data (such as a person’s name or initials), it can still be used and published — but only if the holder of the email has given valid consent.
However, it is not possible for the email holder to say they do not want their email to be published. This follows from the NIS2 Act.
How Punktum dk intend to manage this
If you want to give your customers the opportunity to consent to using an email address that contains personal data, please make sure they know the email will be published and how to withdraw their consent.
We will e.g. inform the registrant that he/she always can withdraw their consent by changing their email address on our self-service portal, or for your customers, they must contact you.
Just as we store all received consents from registrants, we kindly ask you to also retain documentation of the consent you obtain from your customers, so you can prove it, if necessary.
