Are you a digital service provider? If so, you may be subject to
new information security standards and incident reporting-related
obligations.
These obligations are separate to those contained in the General
Data Protection Regulation that took effect in May 2018, which at
this stage is true to say businesses are becoming increasingly well
informed on.
The EU Directive on the Security of Network and Information
Systems (the "NIS Directive") took
effect on 9 May 2018 and had to be transposed into Member State law
by the same date. Such national implementing laws further specify
how the regime applies in the respective Member State and also set
out fines for businesses in breach of their obligations. In
Ireland, the NIS Directive was transposed on 18 September 2018 by
way of a statutory instrument in the form of the European Union
(Measures for a High Common Level of Security of Network and
Information Systems) Regulations 2018 (the "2018
Regulations")1. Both the
