securitatea informaţiilor din UE // The NIS Directive: Developing the EU Cybersecurity Regulatory Framework

Abstract

The last decades are characterized by digitalization and technological innovation, an evolution that has determined both the efficiency of economic activities and risks on the security of business information and personal data. Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems – the NIS Directive – aims to protect critical and digital infrastructures to ensure the functioning of systems considered essential for the population, laying down essential service operators and digital service providers the obligation to implement minimum protection measures related to the risks to the security of information systems. In this study we aim to analyse how the NIS Directive impacts business and, at the same time, to evaluate the interaction of its provisions with those of EU Regulation 2016/679 – General Regulation on the protection of personal data (GDPR).

Keywords

• nis directive
• nis
• gdpr
• data protection
• information security
• cybersecurity