EU Network and Information Security (NIS) Directive: Parliament adopts new law to strengthen EU-wide resilience


Rules requiring EU countries to meet stricter supervisory and enforcement measures and harmonise their sanctions were approved by MEPs on Thursday. The legislation, already agreed between MEPs and the Council in May, will set tighter cybersecurity obligations for risk management, reporting obligations and information sharing.

The requirements cover incident response, supply chain security, encryption and vulnerability disclosure, among other provisions. More entities and sectors will have to take measures to protect themselves. “Essential sectors” such as the energy, transport, banking, health, digital infrastructure, public administration and space sectors will be covered by the new security provisions.

Read more…
Source: European Parliament


Sign up for our Newsletter


Related:

  • NATO and European Union leadership sign third joint declaration

    January 10, 2023

    NATO Secretary General Jens Stoltenberg, the President of the European Council, Charles Michel, and the President of the European Commission, Ursula von der Leyen, met on Tuesday (10 January 2023) at NATO Headquarters to sign the third Joint Declaration on NATO-European Union cooperation. Speaking at a joint press conference, Mr Stoltenberg said: “we are determined to ...

  • Ireland fines Meta $414m for using personal data without asking

    January 4, 2023

    A legal saga between Meta, Ireland and the European Union has reached a conclusion – at least for now – that forces the social media giant to remove data consent requirements from its terms of service in favor of explicit consent, and subjects it to a few hundred million more euros in fines for the ...

  • Twitter Probed in EU for Pre-Musk Data Leak of 5.4 Million Users

    December 23, 2022

    Ireland’s Data Protection Commission said Friday it decided to start a probe over reports that one or more datasets of users’ personal information “had been made available on the internet.” “These datasets were reported to contain personal data relating to approximately 5.4 million Twitter users worldwide,” the agency said. “These datasets were reported to map Twitter ...

  • Eurozone plans to formalize passenger data, improve security

    December 20, 2022

    The European Commission last week proposed rules governing the use of Advance Passenger Information in a bid to strengthen border security. As commissioner for home affairs Ylva Johansson explained during a press conference, travel in and out of the Schengen zone – the 26 European countries between which passengers are free to travel without visas – ...

  • Apple should pay €6m to French data watchdog for tracking users without consent, says official

    December 13, 2022

    Apple tracked users without their consent and deserves to be fined €6 million, according to a top advisor to France’s data privacy watchdog. The Commission nationale de l’informatique et des libertés (CNIL) launched an investigation into Apple after a complaint filed by France Digitale, a lobby group supporting startups, accused the company of violating EU privacy ...

  • Ransomware group Play threatens to publish Antwerp’s data

    December 12, 2022

    Ransomware group Play claims to hold 557GB of data from the city of Antwerp. The local government fell victim to a ransomware attack last week. Play listed the city of Antwerp on its darkweb page on Sunday. The ransomware group uses the page to publicize victims. Play claims to hold 557GB of city data, including passports ...