Access Alert: Belgian Public Consultation on the Implementation of the EU NIS2 Directive

Access Alert: Belgian Public Consultation on the Implementation of the EU NIS2 Directive

The Belgian Center for Cybersecurity (CCB) has launched a public consultation on a preliminary draft Law Establishing a Framework for the Cybersecurity of Networks and Information Systems of General Interest for Public Security (“Belgian NIS2 Law”), as well as on the draft Royal Decree implementing it.

The preliminary draft Law and the draft Royal Decree aim to transpose domestically Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 concerning measures intended to ensure a common high level of cybersecurity in the Union (“NIS2 Directive”). EU Member States must adopt and publish the measures necessary to comply with the NIS 2 Directive by 17 October 2024.

The Belgian NIS2 Law sets, on the one hand, obligations with regard to national cybersecurity policies and, on the other hand, imposes requirements for certain entities (essential entities and important entities) in terms of management of cybersecurity risks and incident reporting.

NIS2 eliminates the distinction between operators of essential services and digital service providers – entities would now be classified based on their importance and divided into two categories: essential and important entities. The following services are considered of high criticality:

  • Digital infrastructure (internet exchange points; DNS service providers; TLD name registries; cloud computing service providers; data centre service providers; content delivery networks; trust service providers; providers of public electronic communications networks and publicly available electronic communications services);
  • ICT service management (managed service providers and managed security service providers);
  • Public administration; and
  • Space

Essential and important entities must take appropriate and proportionate measures to manage risks that threaten the security of the networks and information systems that these entities use in the course of their activities or the provision of their services, as well as to eliminate or reduce the consequences of incidents on the recipients of their services and on other services. Within those, digital infrastructure, public administration, and space are essential entities, while digital providers are considered as important entities.

Essential entities will be required to meet supervisory requirements as of the introduction of NIS2, while the important entities will be subject to ex-post supervision, whereby authorities can take action once they receive evidence of non-compliance.

The Belgian Center for Cybersecurity has invited stakeholders to provide comments on the proposed measures by 21 December 2023.

Cyber-attacks are among the fastest-growing form of crime worldwide in terms of scale, cost, and sophistication. Organisations should start preparing by defining their compliance roadmap and optimising their cybersecurity awareness. If you are interested in learning more about Belgian legislation or require support in sending comments to CCB, please contact Chrystel Erotokritou, Compliance Manager, at [email protected] or Juliana Ramirez, Senior Manager, at [email protected].

Related Articles

FinTech’s Role in SMEs and Inclusive Growth

FinTech’s Role in SMEs and Inclusive Growth

SMEs account for 90% of businesses and 50% of employment globally. However, limited financial access and regulatory complexities prevent these...

29 Feb 2024 Opinion
Tech Policy Trends 2024: Consumer protection – The next battleground for digital pioneers

Tech Policy Trends 2024: Consumer protection – The next battleground for digital pioneers

With technologies emerging and advancing at a rapid pace, tech players are under unprecedented scrutiny for how it impacts consumers’...

28 Feb 2024 Opinion
Access Alert: Advancing pan-African mobile roaming to unlock seamless connectivity and growth opportunities

Access Alert: Advancing pan-African mobile roaming to unlock seamless connectivity and growth opportunities

Digital transformation is accelerating in Africa, driven by the growing adoption of mobile services. According to the World Bank, sub-Saharan...

23 Feb 2024 Opinion
Revolutionising Africa’s connectivity as WRC-23 unveils game-changing spectrum milestones

Revolutionising Africa’s connectivity as WRC-23 unveils game-changing spectrum milestones

The World Radiocommunication Conference 2023 (WRC-23) was a landmark event for the global regulation of the radio-frequency spectrum and the...

23 Feb 2024 Opinion