EU proposes amendments to NIS 2 Directive for simplification and alignment with Cybersecurity Act

Original title: Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL amending Directive (EU) 2022/2555 as regards simplification measures and alignment with the Proposal for the Cybersecurity Act 2

The European Commission has proposed amendments to Directive (EU) 2022/2555 (NIS 2 Directive) to introduce simplification measures and ensure alignment with the proposed Cybersecurity Act 2. This proposal aims to streamline cybersecurity requirements across the EU while harmonizing them with the new cybersecurity legislative framework. The amendments are expected to reduce compliance complexity for covered entities without diminishing security standards.

What changed

• The proposal introduces amendments to NIS 2 Directive to simplify compliance requirements and reduce administrative burden on covered entities while maintaining high cybersecurity standards
• Alignment provisions are established to ensure consistency between NIS 2 Directive requirements and the proposed Cybersecurity Act 2 framework
• The amendments aim to harmonize definitions, procedures, and obligations across both legislative instruments to eliminate overlaps and conflicts

Who is affected

Essential and important entities subject to NIS 2 Directive obligations across EU Member States, including critical infrastructure operators, digital service providers, and other sectors designated under the directive

Summary generated by a language model; the official text prevails. Not legal advice.