Sabitlenmiş Tweet

A small piece of EU cybersecurity law history after yesterday’s discussion with @XaverSchulze on CRA, NIS2 and ISO 27k.
I had the opportunity to comment on the first Czech cybersecurity law draft back in 2013, while delivering solutions to the people behind it. At the time when this wasn't even a thing in Europe.
France was first in 2013. Czechia followed in 2014, then Lithuania and Germany. Much of the rest of Europe only came with the 2018 NIS wave:
19 Dec 2013 — France: Loi n° 2013-1168 du 18 décembre 2013 relative à la programmation militaire...; Article 22 inserted security rules for systèmes d'information d'importance vitale used by opérateurs d'importance vitale.
However, it was not a standalone “Cybersecurity Act,” but the cyber obligations were introduced by Article 22 of the Military Programming Law, which inserted cybersecurity rules for operators of vital importance.
So the first standalone cyber law in Europe was the one that I commented.
29 Aug 2014 — Czechia: Zákon č. 181/2014 Sb., o kybernetické bezpečnosti a o změně souvisejících zákonů; the act expressly regulates rights and obligations in cyber security and the powers of public authorities.
23 Dec 2014 — Lithuania: Lietuvos Respublikos kibernetinio saugumo įstatymas (No. XII-1428); the official TAR record shows publication on 2014-12-23.
24 Jul 2015 — Germany: Gesetz zur Erhöhung der Sicherheit informationstechnischer Systeme (IT-Sicherheitsgesetz), published in BGBl. I No. 31 on 24 July 2015; the BSI notes it entered into force on 25 July 2015.
2018 — Slovakia: Zákon č. 69/2018 Z. z. o kybernetickej bezpečnosti
2018 — United Kingdom: Network and Information Systems Regulations
2018 — Slovenia: Zakon o informacijski varnosti (ZInfV)
2018 — Estonia: Küberturvalisuse seadus
2018 — Italy: Decreto Legislativo n. 65/2018
2018 — Sweden: Lag (2018:1174) om informationssäkerhet...
2018 — Croatia: Zakon o kibernetičkoj sigurnosti...
2018 — Poland: Ustawa o krajowym systemie cyberbezpieczeństwa
2018 — Portugal: Lei n.º 46/2018
2018 — Spain: Real Decreto-ley 12/2018
2018 — Ireland: NIS Regulations 2018
2018 — Netherlands: Wet beveiliging netwerk- en informatiesystemen
2018 — Bulgaria: Закон за киберсигурност
2018 — Greece: Νόμος 4577/2018
2018 — Austria: Netz- und Informationssystemsicherheitsgesetz (NISG)
2019 — Belgium: NIS framework law
2023 — Romania: Legea nr. 58/2023
2023 — Norway: Lov om digital sikkerhet
2024 — Latvia: Nacionālās kiberdrošības likums
2024 — Hungary: 2024. évi LXIX. törvény Magyarország kiberbiztonságáról
2025 — Finland: Kyberturvallisuuslaki
2025 — Denmark: NIS 2-loven
#CRA #NIS-2 #CyberSecurity #EU #Europe #History #Legal #Law #History

English
































