Regulation (EU) 2018/1119
After the competent authority has communicated a finding to a DTO in accordance with point ARA.GEN.350(da)(1), the DTO shall take the following steps within the time period determined by the competent authority:
(a) identify the root cause of the non-compliance;
(b) take the necessary corrective action to terminate the non-compliance and, where relevant, remedy the consequences thereof;
(c) inform the competent authority about the corrective action it has taken.