The EU Parliament approved on March 13, 2014, a revised draft of the Cyber Security Directive first issued by the EU
Commission in early 2013. The Directive will impose mandatory
obligations on public authorities and market operators, and thereby
aims to harmonize cybersecurity across the EU. With its revisions, the EU Parliament provided for a
clearer definition of the critical infrastructure businesses that
will be subject to the Directive (information society services are
no longer subject to the Directive). The revised draft still needs
to be approved by the Council of the European Union. It thus is not
yet known when the Directive will become final and whether and to
what extent further changes will be applied.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
