Council Adopts NIS2

On Monday, 28 November 2022, the Council adopted the NIS2 Directive, which will now be published in the Official Journal of the EU in the coming days to entry into force. Member States will then have 21 months from the entry into force to transpose the Directive into national law.

PG Chiara – The Cyber Resilience Act: the EU Commission’s Proposal for a Horizontal Regulation on Cybersecurity for Products with Digital Elements

Pier Giorgio Chiara, who has in the past contributed to this blog on several occassions, has published a research article on the CRA Proposal in the International Cybersecurity Law Review ([2022] 225 – 272). His article outlines the content of the CRA Proposal and also addresses the interplay with the forthcoming NIS 2.0 Directive. Abstract: … Continued

ENISA Threat Landscape 2022: Geopolitical Tensions as a Game Changer

On 3 November 2022, the EU Agency for Cybersecurity, ENISA, published its Threat Landscape 2022 (ETL) Report. The 10th edition of the Report covers the reporting period of July 2021 up to July 2022. The Report’s content is gathered from open sources such as media articles, expert opinions, intelligence reports, incident analysis and security research reports; … Continued

The Cyber Resilience Act Proposal: New Horizontal Cybersecurity Requirements for Hardware and Software Products

Guest Author: Pier Giorgio Chiara The EU Commission presented on 15 September 2022 a proposal for a regulation ‘on horizontal cybersecurity requirements for products with digital elements and amending Regulation (EU) 2019/1020’, known as the Cyber Resilience Act (CRA). The Act, building on the 2020 EU Cybersecurity Strategy for the digital decade, will bolster cybersecurity … Continued

EnCaViBS Poster Series: Pseudonymisation Techniques – the Case of the Health Sector

The healthcare sector is one of the sectors covered by the NIS Directive. Healthcare has highly benefited from technological progress and digitalisation. With the integration of new technologies, new challenge emerge in relation to data protection and cybersecurity. New challenges are also linked to the extended information exchange among healthcare service providers. Large volume of … Continued