Kata Viktoria Eles

Jan 6, 2025 | jdsupra.com | Kata Viktoria Eles |Nicola Kerr-Shaw |David Simon

[co-author: Aleksander Aleksiev]The EU’s Digital Operational Resilience Act (DORA) becomes binding on 17 January 2025. As the compliance deadline approaches, EU financial regulators (ESAs) have issued a flurry of statements on the act, including: An ESA statement on DORA compliance. The publication of the final Implementing Technical Standard for registers of information. An ESA report on regulators’ DORA “dry run” of registering information.

Oct 14, 2024 | jdsupra.com | Kata Viktoria Eles |William Ridgway |Nicola Kerr-Shaw

Executive Summary The deadline for EU countries to transpose the expanded cybersecurity directive, NIS 2, into national law is 17 October 2024, but the implementation status varies significantly from country to country. Some of the member states will miss the deadline. In others, the new regulation is expected shortly. NIS 2 significantly expands the scope of NIS 1 and revises how companies are classified.

Oct 11, 2024 | lexology.com | Susanne Werry |William Ridgway |David Simon |Nicola Kerr-Shaw |Kata Viktoria Eles

Executive Summary The deadline for EU countries to transpose the expanded cybersecurity directive, NIS 2, into national law is 17 October 2024, but the implementation status varies significantly from country to country. Some of the member states will miss the deadline. In others, the new regulation is expected shortly. NIS 2 significantly expands the scope of NIS 1 and revises how companies are classified.

Apr 15, 2024 | jdsupra.com | Kata Viktoria Eles |William Ridgway |David Simon

Executive Summary Valuable insights into the measures European regulators expect businesses to take to protect data privacy can be found in a report from the European Data Protection Board (EDPB) summarizing decisions under the EU’s General Data Protection Regulation (GDPR).

Apr 15, 2024 | lexology.com | Susanne Werry |William Ridgway |David Simon |Kata Viktoria Eles

Executive Summary Valuable insights into the measures European regulators expect businesses to take to protect data privacy can be found in a report from the European Data Protection Board (EDPB) summarizing decisions under the EU’s General Data Protection Regulation (GDPR). Although the decisions were made by authorities in different EU member states and the measures were discussed on a case-by-case basis tailored to specific data breaches, broader lessons can be drawn for other situations.