INFORMATION TECHNOLOGY
EU Parliament adopts NIS2 Directive and the Regulation on digital operational resilience for the financial (DORA).
The European Parliament announced the adoption of the proposal for a Directive on measures for a high common level of cybersecurity across the Union, repealing Directive (EU) 2016/1148 ('NIS2 Directive'), following the provisional agreement reached with the Council of the European Union on 13 May 2022.
The NIS2 Directive will set tighter cybersecurity obligations for risk management, reporting obligations, and information sharing. More entities and sectors will have to take measures to protect themselves. "Essential sectors" such as the energy, transport, banking, health, digital infrastructure, public administration, and space sectors will be covered by the new security provisions and the new rules will also protect so-called "important sectors" such as postal services, waste management, chemicals, food, manufacturing of medical devices, electronics, machinery, motor vehicles, and digital providers.
Now the Council of the EU shall formally adopt the NIS2 Directive before it will be published in the Official Journal of the EU.
Separately, the Parliament adopted also the proposal for a Regulation on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU)No 648/2012, (EU) No 600/2014 and (EU) No 909/2014 ('DORA'), following the provisional agreement reached with the Council of the EU on 11 May 2022.
The NIS2 Directive will set tighter cybersecurity obligations for risk management, reporting obligations, and information sharing. More entities and sectors will have to take measures to protect themselves. "Essential sectors" such as the energy, transport, banking, health, digital infrastructure, public administration, and space sectors will be covered by the new security provisions and the new rules will also protect so-called "important sectors" such as postal services, waste management, chemicals, food, manufacturing of medical devices, electronics, machinery, motor vehicles, and digital providers.
Now the Council of the EU shall formally adopt the NIS2 Directive before it will be published in the Official Journal of the EU.
Separately, the Parliament adopted also the proposal for a Regulation on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU)No 648/2012, (EU) No 600/2014 and (EU) No 909/2014 ('DORA'), following the provisional agreement reached with the Council of the EU on 11 May 2022.