Cybersecurity

Cybersecurity

The importance of implementing cybersecurity measures has been highlighted in recent years by high profile security failures involving the internet, the technology, and the services which support and make use of it. Against this backdrop, cybersecurity is of growing significance both to businesses and individuals.

On 16 December 2020, the European Commission and the High Representative of the Union for Foreign Affairs and Security Policy presented an EU Cyber Security Strategy. This strategy covers the security of essential services in the EU (eg hospitals, energy grids and railways) but also the security of connected objects in homes, offices and factories. The strategy focuses on building collective capabilities to respond to major cyber attacks and working internationally to ensure international security and stability in cyberspace.

Key EU cybersecurity initiatives include the EU Cybersecurity Act, the Digital Operational Act (DORA), the NIS 2 Directive, the EU Critical Entities Resilience Directive (CER Directive), the EU Cyber Security Regulation, the EU Cyber Resilience Act and the EU Cyber Solidarity Act.

Practice Note: EU Cybersecurity initiatives tracker tracks the key steps of legislative initiatives on cybersecurity in the EU.

Practice

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest EU Law News

Opera’s Edge dispute raises key question: Who can challenge EU DMA decisions?

MLex: Web browser Opera's challenge to the European Commission over its refusal to designate Microsoft's Edge as a digital 'gatekeeper' was heard in court this week. It delved into the thorny question of who can challenge the regulator's Digital Markets Act decisions: The law doesn't specify any official status for third parties, despite the commission relying on them to inform its decisions. The outcome of the appeal will be significant for companies that operate in the shadows of the biggest platforms.

EU Commission eyes changes to how AI law covers sector regulated products

MLex: The European Commission is considering changes to how products regulated under EU sectoral product safety laws are covered by the EU’s AI law as part of its wider drive to streamline digital regulations, MLex has learned. The move, which is being considered as part of a digital ‘omnibus’ package due 19 November 2025, could ease obligations for sectors such as medical devices and industrial machinery.

EBA publishes CRR final draft RTS on CVA risk of securities financing transactions

The European Banking Authority (EBA) has published its final draft regulatory technical standards (RTS) made under Article 382(6) of the Capital Requirements Regulation (Regulation (EU) No 575/2013) (CRR) specifying the conditions and criteria for assessing whether credit valuation adjustment (CVA) risk exposures arising from fair-valued securities financing transactions (SFTs) are material. The RTS also define the frequency of this assessment.

Commission establishes Digital Commons European Digital Infrastructure Consortium

The European Commission has adopted a decision establishing the Digital Commons European Digital Infrastructure Consortium (DC-EDIC), a new legal instrument enabling Member States to jointly develop, deploy and operate cross-border digital infrastructures with dedicated governance and legal personality. DC-EDIC will have its statutory seat in Paris, with France, Germany, the Netherlands and Italy as founding members, while other Member States may join under fair and reasonable terms. The consortium's governance structure comprises an Assembly of Members, a Director for day-to-day management, and an Advisory Board for strategic orientations. Legal requirements include GDPR-compliant data practices with arrangements for investigating security breaches, default release of jointly developed software under Free and Open-Source licences, and procurement following non-discrimination principles. The consortium is scheduled for official launch in December 2025, with planned milestones including recruitment of the Director and founding team, launch of a DEP support project, and delivery by 2027 of a One-Stop-Shop and Expertise Hub, Digital Commons Forum and Award, and an annual State of the Digital Commons report.