Executive Director
ENISA (European Union Agency for Cybersecurity)

Dear Mr Lepassaar,

Thank you for the letter of 24 November 2025 responding to the suggestion for improvement that I made in my decision of 27 August 2025.

It is encouraging to learn that the European Union Agency for Cybersecurity’s (ENISA) updated its internal policy on dealing with requests for public access to documents to ensure that requesters are provided with a list of the documents that ENISA identifies in cases where no or only very limited access can be granted. I also welcome ENISA’s commitment to provide requesters in such cases with useful information to address their access request. I consider this to be a service-minded and citizen-friendly approach, which is commendable.

Yours sincerely,

Teresa Anjinho
European Ombudsman

Strasbourg, 01/12/2025