On 19 October 2024, the Greek government published the draft law for the transposition of the NIS 2 Directive into national legislation.
This significant update aims to enhance cybersecurity across critical sectors and services, adjusting the relevant legal framework to the needs and requirements of the current risk environment. Compared to the original NIS 1 framework, the new directive expands the scope to include more sectors, imposes stricter cybersecurity requirements, and enforces harsher sanctions for non-compliance.
The NIS 2 Directive is designed to ensure a higher common level of security for network and information systems throughout the EU. It also aims to empower cyber resilience by introducing obligations across risk management, corporate governance, incident reporting, as well as business continuity after a cyber incident.
Public consultation on the draft law was concluded on 2 November 2024, allowing interested parties to provide their feedback. The bill has now been submitted to the Parliament and it is scheduled to be discussed by the Standing Committee on Public Administration, Public Order and Justice on 15 November, before being brought to the plenary for final voting.
Our dedicated team of Data Privacy experts at Ballas Pelecanos Law follows all related developments closely—keep an eye on this space for updates!