Share on LinkedInShare on LinkedIn

ARTICLE · 14 MAY 2026

EDPB – EDPS Publish Opinion On The Cybersecurity Package

The European Data Protection Board and European Data Protection Supervisor have issued their Joint Opinion on the European Commission's proposed Cybersecurity Act 2 and amendments to the NIS 2 Directive. While generally supportive of strengthened cybersecurity measures, the opinion emphasizes the need to balance effective security protocols against fundamental rights to privacy and data protection, offering specific recommendations to ensure compliance with EU data protection law.

European UnionPrivacy

The European Data Protection Board (“EDPB”) and the European Data Protection Supervisor (“EDPS”) recently published their Joint Opinion 4/2026 (the “Opinion”) on the European’s Commission’s proposal for a Cybersecurity Act 2 and proposal for targeted amendments to the NIS 2 Directive (together, the “Proposals”) (previously discussed here).

The EDPB and EDPS generally support and welcome the Proposals. However, the Opinion acknowledges that the relationship between data protection and cybersecurity is “double-sided”. On the one hand, cybersecurity serves the protection of personal data by limiting the risks of unwanted access, modification or unavailability of that data. On the other hand, some cybersecurity measures can interfere with individuals’ rights and freedoms, in particular the rights to privacy and data protection. The Opinion emphasises the need to balance the effectiveness of cybersecurity measures against what is necessary and proportionate, having regard to the impact on

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from