NIS2 Directive - Legal Preparedness of EU Health Infrastructure Against Large-Scale Cyberattacks
NIS2 Directive - Legal Preparedness of EU Health Infrastructure Against Large-Scale Cyberattacks

Author(s): Antonia Rengle
Subject(s): Politics / Political Sciences, Politics, Social Sciences, Law, Constitution, Jurisprudence, Law and Transitional Justice, Sociology, Security and defense, Health and medicine and law, EU-Legislation
Published by: ADJURIS – International Academic Publisher
Keywords: NIS2 Directive; EU health infrastructure; large-scale cyberattacks; critical infrastructure; cyber vulnerabilities; management accountability;
Summary/Abstract: This study examines the legal preparedness of European Union health infrastructure under the NIS2 Directive (Directive (EU) 2022/2555) against large-scale cyberattacks, focusing on the health sector as critical infrastructure. Its primary objectiveis to assess the effectiveness of NIS2’s legal mechanisms – risk management, incident reporting, and management accountability – in safeguarding health systems. The research methodology involves a detailed analysis of four recent case studies: Synnovis (2024), NailaoLocker (2024), HSE (2021/2024), and Vastaamo (2020/2024), supplemented by additional research from sources such as ENISA reports and European Commission documents. Findings highlight strengths, including rapid reporting and management accountability, alongside weaknesses such as coordination delays, legacy system vulnerabilities, and uneven transposition. The implications indicate that while NIS2 provides a robust framework, it requires operational and financial support to ensure resilience, proposing reforms like a unified crisis protocol and mandatory system upgrades. This study contributes to the legal discourse on EU cybersecurity, emphasizing the needfor harmonization and adequate resources.

• Details
• Contents