News item |: 16.6.2023 |: 12:15 p.m
In May 2023, the schedule was adjusted, moving the internet consultation period to autumn 2023. Previously, summer 2023 was used as the time period. The laws are expected to come into force at the end of 2024.
Why has the schedule changed?
Implementation of both the CER and NIS2 guidelines is an extensive and complex process, in part because it was decided to implement the two guidelines together. In addition to the complexity, the impact of the guidelines is also great. First, because compared to the NIS1 guideline, more sectors and more organizations will be covered by the implementing act. Second, more is also required of the sectors and organizations involved, as both directives contain a duty of care (safety requirements) and a duty to report incidents. The implications are also high for government in relation to the required oversight and CSIRT tasks.
Because of this complexity and impact, it is important to draft the bill carefully and clearly so that all parties involved know what is expected of them. In order to provide sufficient time for this, it was decided to devote more time to the writing of legislative proposals, which will then be discussed in the fall of 2023.
Click here for more information on the NIS2 guide and how to assign it to your organization.