| Author (Corporate) | Council of the European Union, European Parliament |
|---|---|
| Series Title | Official Journal of the European Union |
| Series Details | L 333, Pages 80-152 |
| Publication Date | 27/12/2022 |
| Content Type | Blog & Commentary, Legislation, News, Policy-making |
Summary:Directive (EU) 2022/2555 - formally adopted by the co-legislators on 14 December 2022 - revising the legislative framework concerning cyber-security across the European Union (EU). It revises and repeals Directive (EU) 2016/1148 (NIS Directive). It also introduces amendments to Regulation (EU) No 910/2014 and Directive (EU) 2018/1972. The Act is known as the NIS2 Directive. This is a text with EEA relevance. Further information:This Directive lays down obligations that require Member States to adopt national cybersecurity strategies and to designate or establish competent authorities, cyber crisis management authorities, single points of contact on cybersecurity and computer security incident response teams (CSIRTs). It also sets out cybersecurity risk-management measures and reporting obligations for a number of entities, rules and obligations on cybersecurity information sharing, and supervisory and enforcement obligations in Member States. Directive (EU) 2016/1148 - also known as the NIS Directive - was the first piece of EU-wide legislation on cybersecurity and has provided legal measures to boost the overall level of cybersecurity in the European Union. The need for a legislative revision arose from the increased digitisation of the internal market and an evolving cyber security threat landscape. The review also addressed several weaknesses that prevented the NIS Directive from unlocking its full potential. The draft law was adopted by the European Commission on 16 December 2020, as part of a package which also includes a new EU Cybersecurity Strategy. It sought to modernise the legal framework, covering medium and large entities from more sectors based on their criticality for the economy and society. The European Parliament adopted a negotiating position on 22 November 2021. The Council of the European Union adopted its general approach on 3 December. An informal agreement between the co-legislators on a compromise text for this file was reached on 13 May 2022. This was formally endorsed by the Parliament's plenary on 10 November and by the Council on 28 November. The Act was signed by the co-legislators on 14 December 2022 and published in the Official Journal on 27 December 2022. |
|
| Source Link | http://data.europa.eu/eli/dir/2022/2555/oj |
| Related Links |
|
| Subject Categories | Internal Markets, Justice and Home Affairs, Security and Defence |
| Subject Tags | Cybersecurity | Cyber-security, Risk | Crisis Management |
| Keywords | Data Privacy | Protection |
| International Organisations | European Union [EU] |
