EUROPEAN LEGISLATIVE DEVELOPMENTS IN THE FIELD OF CYBER SECURITY
EUROPEAN LEGISLATIVE DEVELOPMENTS IN THE FIELD OF CYBER SECURITY

Summary/Abstract: The evolution of the European legislative framework in the field of cybersecurity highlights the transition from sectoral and fragmented regulations to a coherent and integrated regulatory architecture. The main stages analyzed include the NIS 1 Directive, with its limitations regarding regulatory fragmentation, narrow scope of application, and lack of an effective sanctioning regime, and culminating in the adoption of Directive (EU) 2022/2555 (NIS 2), which extends the scope, standardizes requirements and introduces proportionate sanctions, reinforced by European cooperation mechanisms. The complementarity between NIS 2 and Directive (EU) 2022/2557 (CER) is also highlighted, which together form a resilience framework for critical infrastructures, combining technical, organizational, and strategic measures designed to protect both the digital and physical components of essential services. Finally, recent national legislation – Government Emergency Ordinance No. 155/2024 and Law No. 294/2024 – is examined as instruments of transposition and implementation, as well as the challenges associated with their application in Romania.

• Details
• Contents