EDPB and EDPS Approve Modifications to Cybersecurity Act and NIS2 Directive with GDPR Compliance Emphasis
Regulations and CompliancePrivacy and Personal DataCybersecurity ActData Protectionpersonal datasuppliersGdprPrivacyransomware
The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have approved modifications to the Cybersecurity Act and NIS2 Directive, emphasizing that expanded data collection and sharing tools must comply with GDPR principles. The approval includes a reminder that data protection regulations remain binding despite enhanced cybersecurity measures. No specific technical details, dates, or numerical impacts were provided in the notice. The focus is on ensuring alignment between cybersecurity frameworks and existing privacy laws. The decision applies within the European Union regulatory context.