What it asks for. Article 29 requires Member States to ensure that entities can exchange cybersecurity information among themselves on a voluntary basis, such as threats, vulnerabilities, indicators of compromise and tactics, within trusted communities. Entities must notify competent authorities when they join or leave such arrangements.
In practice. Organisations join sector ISACs, national CERT communities or other trusted groups, agree rules on handling and confidentiality, and integrate received intelligence into detection and vulnerability management. They also contribute their own findings where appropriate. Evidence includes membership records, sharing agreements, notifications to authorities and examples of intelligence used.
Common gaps. Participation is often passive: intelligence is received but not acted on. Legal uncertainty about sharing personal data such as IP addresses also limits contributions.