How to keep your data safe in the new digital employment environment

Given that the landscape of threats has significantly expanded, it comes as no surprise that the European Commission has proposed a revised version of the Directive concerning measures for a high common level of security of network and information systems across the Union.

Though not more than two years have passed since the Directive on security of network and information systems1 (“NIS Directive”) had to be transposed by the Member States into their national legislation, the European Commission (the “Commission”) has announced, early this year, its intention to review the NIS Directive. The initiative comes earlier than planned, […]

ROMANIA IS ENACTING THE SECONDARY LEGISLATION PERTAINING TO CYBERSECURITY IN AN EFFORT TO AVOID EUROPEAN SANCTIONS 1. Background On October 30, 2020, the European Commission sent a reasoned opinion1 regarding Romania’s failure to notify the national measures allowing for the identification of operators, the number of operators of essential services and the thresholds used in the identification process. The notification process is part of the implementation process of the Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems across the Union (the “NIS Directive”). NIS Directive was transposed into the Romanian legislation through Law no. 362/2018 for ensuring a high common level of security of networks and information systems (“NIS Law”). The responsibility for setting up the list of essential services within the meaning of the NIS Directive falls with the Romanian National Computer Security Incident Response Team (“CERT-RO”).