The first cybersecurity law to cover the entire European Union has now gone into effect, EURACTIV reports. The law requires entities ranging from water and energy services to search engines and cloud computing service providers to report any cybersecurity breaches to national authorities. Failure to report an incident could result in fines of up to 19 million euros. Other portions of the Network and Information Security Directive will go into effect later this year. An official said some member states were not ready to finalize their versions of the rules before the implementation deadline, but the European Commission is already working to use the NIS Directive to further the Cybersecurity Act, which is making its way through negotiations.
Full Story