Stronger rules to be applied to protect EU’s critical infrastructure

Article summary

The European Commission has announced that two new key directives concerning digital and critical infrastructure have entered into force. The directives will aim to improve the resilience of critical entities such as data centre services, public communications networks and services, wastewater and waste management, and others. The Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) will replace the first EU-wide legislation on cybersecurity, to ensure a safer and stronger Europe by expanding the sectors and types of critical entities that fall within its scope, as well as improving mandatory cybersecurity risk management requirements. The Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities and repealing Council Directive 2008/114/EC (Text with EEA relevance) will...