NIS2 Directive For The Strengthening Of EU Cybersecurity Approved

On 17 January 2023, EU Directive No. 2022/2555 of 14 December 2022 (the "NIS2 Directive"), which aims to improve the resilience and responsiveness of both the public and private sectors to cyber incidents, came into force. The new directive addresses the limitations and shortcomings of the previous NIS1 regulation, which was adopted in 2016 and was the EU's first legislative act on cybersecurity to achieve a high common level of cybersecurity in all Member States. One of the main criticisms of the NIS1 Directive was its operational vagueness, with obligations that were too general, leading to significant heterogeneity among Member States. The NIS2 Directive modernises the regulatory framework by specifying, strengthening, and expanding the scope of these obligations to more recipients. It is based on four key principles: personal data protection, fundamental rights, safety and cybersecurity. The NIS2 Directive's primary objectives include strengthening security