Statute
Cybersecurity Act
20 published works
Inside Privacy
Implications of the EU Cybersecurity Scheme for Cloud Services
By Lisa Peets, Marty Hansen, Mark Young, Bart Szewczyk
A would-be technical development could have potentially significant consequences for cloud service providers established outside the EU. The proposed EU Cybersecurity Certification Scheme for Cloud Services (EUCS)—which has been developed…
Privacy World
Fewer Clouds on … Cloud: The EU to (Finally) Drop Most Data Localisation Requirements in the EUCS
According to the latest draft of the EU cybersecurity certification scheme for cloud services (EUCS), dated August 2023 (leaked by POLITICO), the data localisation requirement, which was heavily criticised by…
ComplexDiscovery
Fitting the Needs of Operators of Essential Services? Demand Side of Cyber Insurance in the EU
By Rob Robinson
Editor’s Note: ENISA, the European Union Agency for Cybersecurity, was established in 2004 to promote a high level of cybersecurity across Europe. The EU Cybersecurity Act has strengthened its role,…
The Data Advisor
The EU Cybersecurity Act Introduces Certifications and the New Cybersecurity Agency
By Cédric Burton, Jan Dhont, Nikolaos Theodorakis
On June 27, 2019, the EU Regulation on Information and Communication Technology (Cybersecurity Act or Act) became effective introducing, for the first time, EU-wide rules for the cybersecurity certification of…
Technology Law Dispatch
EU Cybersecurity Act gets the green light!
By Cynthia O’Donoghue, Howard Womersley Smith
On 7 June 2019, Regulation (EU) 2019/881 on ENISA (the European Union Agency for Network and Information Security) and on information and communications technology cybersecurity certification, also known as the Cybersecurity…
Inside Privacy
European Parliament Approves EU Cybersecurity Act
By Mark Young
Following a political agreement at the end of 2018, earlier this week the European Parliament approved a new cybersecurity regulation known as the EU "Cybersecurity Act" This forms part of…
Health Care and Life Sciences
Healthcare Cybersecurity Preparedness Tops HHS Priority List
Recently, the U.S. Department of Health & Human Services (“HHS”) issued guidance for healthcare cybersecurity best practices. As required under the Cybersecurity Act (CSA) of 2015, this four-part guidance was…
Privacy & Information Security Law Blog
Agreement on Proposal for Cybersecurity Act
The European Commission, the European Parliament have reached a proposed agreement with the Council of the European Union regarding changes to the EU’s Cybersecurity Act.
Technology Law Dispatch
EU to create a cybersecurity certification framework
By Cynthia O’Donoghue, Curtis McCluskey
To enhance cyber resilience, the EU is building a certification framework for information and communication technology (ICT) products, services and processes. On 8 June 2018, the Council agreed a Proposal…
Proskauer on Privacy
The Health Care Industry Cybersecurity Task Force Prompts HHS to Issue a Revised HIPAA Breach Reporting Tool
By Elizabeth (Betsy) Rosen Siegel
Congress established the Health Care Industry Cybersecurity Task Force (the “Task Force”) in the Cybersecurity Act of 2015 (the “Act”) to address the challenges the health care industry faces when…