Understanding Changes In The NIS 2 Directive And Its Transposition Into Maltese Law

The NIS 2 Directive, marks yet another important step ahead in policy on cybersecurity from the European Union. Building from the NIS Directive, the NIS 2 Directive creates a high common level of cybersecurity across the European Union Member States in response to more sophisticated and frequent cyber threats. The NIS 2 Directive extends the scope of its regulations further, expands the security and incident reporting requirement, and brings in more stringent enforcement measures with a view to achieving better cybersecurity practices from essential entities. The NIS 2 Directive is being transposed into Maltese law in its consultation document, titled "Measures for A High Common Level of Cybersecurity Across The European Union Malta Order 2024" the Maltese Government is proposing some particular national adaptations (which are discussed further below in this paper).