欧盟新数字法律——构建切实可行的合规路线图.pdf

1、The EU Digital Rulebook in Practice From Data Act to AI as a Service.Session 2New EU Digital Laws Building a Practical Compliance Roadmap.Session 2Jaap TempelmanPartner(Amsterdam),Digital BusinessSimmons&Simmons NetherlandsOverviewSnapshot of EU/DE Digital LawsEU Cybersecurity RegulationsOverviewAn

2、overviewNIS2-DirectiveNIS2-DirectiveCybersecurity requirements for essential and important entities.Implementation deadline:18 Oct.2024.Critical EntitiesResilienceDirectiveCritical EntitiesResilienceDirectivePhysical security requirements for designated essential entities.Implementationdeadline:17 O

3、ct.2024Cyber Resilience ActCyber Resilience ActCybersecurity requirements for connected hardware and software products.11 Sept 2026:report actively exploited vulnerabilities.11 Dec.2027:fully applicable.Cyber Security ActCyber Security ActMandate ENISA and voluntary certification scheme.27 Feb.2025:

4、fully applicable.To be revised in 2026.Cyber Solidarity ActCyber Solidarity ActStrengthening EUs collective ability to respond to large-scale cybersecurity threats.4 February 2025:in force.Digital Operational Resilience ActDigital Operational Resilience ActCybersecurity requirements for financial en

5、tities.17 Jan.2025:fully applicable.NIS2 vs NIS1NIS2 vs NIS1NIS2 Directive Moves beyond just operators of essential services to include many more sectors.Lowers thresholds to include most medium-sized and large entities.Designation by operation of law.Expansion of scopeExpansion of scopeMandates con

6、crete measures like risk analysis,incident handling,supply chain security,and encryption.Explicit focus on securing the supply chain and supplier relationships.Enhanced security measuresEnhanced security measuresReplaces vague reporting with strict,multi-stage requirements:a 24-hour early warning an