NIS2, the EU’s second Network and Information Systems Directive, is not going anywhere. While the swathe of organisations newly in scope of the EU’s hallmark cybersecurity directive may have hoped that the EU’s recent announcements on regulatory simplification (including the Digital Omnibus) might have reduced their compliance burden, in

Continue Reading NIS2’s extended scope takes a deep dive: Unpacking the EU Commission’s proposed expansion to Submarine Data Transmission Infrastructure

Conceptually, you think of IoT devices, but the CRA has a far broader scope of application. In this article we examine one of the tricky nuances – distinguishing between a digital product and SaaS under the CRA.

The EU’s Cyber Resilience Act (CRA) looks to reshape product cybersecurity

Continue Reading Cyber Resilience Act: the fine line between SaaS and digital products

The European Union has ushered in a new era of digital regulation that will significantly impact the data centre industry. With the introduction of the EU Artificial Intelligence Act, the new Network and Information Systems Directive (NIS2) and the Digital Operational Resilience Act (DORA) data centre operators, investors, and service

Continue Reading Navigating the EU’s new digital regulatory landscape: what data centre operators and investors need to know

In Hungary, the NIS2 Directive was transposed in May 2023 following the adoption of Act 23 of 2023 on cybersecurity certification and cybersecurity supervision. Under the Hungarian legislation transposing the NIS2 Directive, domestic entities have until 30 June 2024 to register.

As the title of the new Hungarian legislation indicates

Continue Reading NIS2 Directive: The deadline for the registration of entities in Hungary is 30 June 2024