Here Comes Cyber! European Cyber Strategy and Its Implication for Privacy

The purpose of this session is to explore the intersection between the evolving EU cyber landscape and the application of data protection laws, specifically the EU General Data Protection Regulation. We want to focus on how the European cyber strategy is shaped and will take final form in the coming two years as well as how companies and institutions should prepare for that and embrace the new standards, expectations and requirements in the security space. The scope of cyber regulations has significantly broadened through the Network and Information Security Directive 2, the Digital Operational Resilience Act, the Cyber Resilience Act and the Critical Entities Resilience Directive. Many more entities will be subject to the requirements, either directly (as with NIS2) or indirectly as part of the supply chain or through the evolution of security standards. It is easy to get lost in the myriad obligations, let alone them put into action. This session presents insights on the creation of the cyber landscape for Europe. It also covers perspectives on how to conduct gap assessments, tailor data protection operations, and adhere to the new requirements.

View the presentation material.