|
By Vincent WELLENS, Avocat à la Cour Ottavio COVOLO, Avocat à la Cour, NautaDutilh Avocats Luxembourg S.à r.l.
On 20 January 2026, the EU Commission published a new legislative package targeted at cybersecurity within the EU, taking the form of amendments made to EU Regulation 2019/881 (the “Cybersecurity Act”), as well as to Directive n°2022/2555 (“NIS2”). This package has garnered considerable attention, being characterised as the EU Commission’s attempt to respond to foreign tech creating weaknesses in the EU’s cyber resilience. Why has such package been adopted? What is inside it ? and what does it mean for entities already handling their NIS2 or DORA compliance?
Current state of affairs
Back in...
|