In the Implementing Regulation, the European Commission details risk management requirements for operators of digital services and specifies in which cases an incident must be considered significant. While German industry welcomes harmonisation at European level in general, the proposed definitions must be improved and thresholds increased. Otherwise, the implementing regulation will cause a regulatory uncertainty and unnecessary bureaucracy.