Sunday

18th Nov 2018

Focus

EU to force firms to report major cyber attacks

  • It is the first time that EU-wide rules on cyber security are to be agreed (Photo: europarl.europa.eu)

Negotiators from the European Parliament and national governments have reached an agreement on new cyber-security rules, shortly before midnight on Monday (7 December).

Companies which fulfil certain essential societal functions will have to make sure that they can resist cyber attacks, and report digital security breaches to national authorities.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

It is the first time that EU-wide rules on cyber security are agreed.

The new EU directive will lay down the criteria to determine if a company qualifies as an “operator of essential service”, but member states will be responsible for identifying these key companies, the European Parliament said in a press release.

The sectors where such essential services will need to be guaranteed are: energy, transport, banking, financial market, health, and water supply.

In its press release, the EP also specified three American internet companies as likely to be falling under the new rules.

“In addition, some internet services providers, such as online marketplaces (e.g. eBay, Amazon), search engines (e.g. Google) and clouds, will also have to ensure the safety of their infrastructure and to report on major incidents,” the press release said.

The new directive will also put a “strategic cooperation group” in place where member states should “exchange information and best practices, draw up guidelines and assist member states in cyber security capacity building”.

A complete assessment of the deal, which was clinched behind closed doors in a so-called trilogue process, is not yet possible until the consolidated text of the compromise is published. This is expected to take a few days.

'Milestone'

But the lead negotiator on behalf of the members of the European Parliament (MEPs) already expressed satisfaction with the deal.

“Today, a milestone has been achieved: we have agreed on first ever EU-wide cyber security rules, which the parliament has advocated for years”, centre-right German MEP Andreas Schwab said.

The European Commission, which proposed the cyber security rules in February 2013, mediated the talks.

Digital affairs commissioner Guenther Oettinger said Tuesday (8 December) the new rules are “a major step in raising the level of cyber security in Europe”.

In a speech last month, Oettinger already signalled the importance of the first-ever pan-European cyber security rules.

“We are opening a European legal book”, he said at an annual event of the European Union Agency for Network and Information Security (Enisa) in Brussels.

The EU agency “will play an even more prominent role”, Oettinger had noted.

In an interview with EUobserver, Enisa's executive director Udo Helmbrecht said he expects a positive effect of one of the directive's main features, the obligation for companies that provide essential public services to report major incidents like a cyber attack.

“Putting obligation of reporting incidents will hopefully create a mechanism that people say: 'oh if I have to report something, then I also have to do something for prevention' and by this increasing IT security”, said Helmbrecht.

The deal still needs approval from the full house of the EP and from national governments.

EU to beef up cybersecurity agency

The Commission's president proposed to set up a European Cybersecurity Agency. The EU already has an agency for Network and Information Security.

Hohe Cyber-Bedrohung für Frankreichs Wahlen

Frankreichs Präsident Francois Hollande kündigt an, alle notwendigen Massnahmen zu treffen, um Cyberattacken vor den Präsidentschaftswahlen im April und Mai zu verhindern. Die politischen Parteien sind jedoch weiterhin anfällig.

News in Brief

  1. US warns EU banks and firms against trading with Iran
  2. Merkel urged Romania not to move embassy to Jerusalem
  3. Protesters call for Czech leader to step down
  4. Former German chancellor labelled 'enemy' of Ukraine
  5. French lead opposition to Brexit deal on fisheries
  6. Private accounts of Danske Bank employees investigated
  7. UK's May defends Brexit deal to MPs, after ministers resign
  8. Brexit MP calls for 'no confidence' vote on May

Are EU data watchdogs staffed for GDPR?

The success of the new general data protection regulation (GDPR) will depend on whether data protection authorities enforce the new rules - which, in turn, will be at least partly determined by how many people they employ.

Eight countries to miss EU data protection deadline

The EU starts enforcing its general data protection regulation on 25 May - but Belgium, Bulgaria, Cyprus, Czech Republic, Greece, Hungary, Lithuania and Slovenia won't be ready. The delay will cause legal uncertainty.

Stakeholders' Highlights

  1. NORDIC COUNCIL OF MINISTERSTheresa May: “We will not be turning our backs on the Nordic region”
  2. International Partnership for Human RightsOpen letter to Emmanuel Macron ahead of Uzbek president's visit
  3. International Partnership for Human RightsRaising key human rights concerns during visit of Turkmenistan's foreign minister
  4. NORDIC COUNCIL OF MINISTERSState of the Nordic Region presented in Brussels
  5. NORDIC COUNCIL OF MINISTERSThe vital bioeconomy. New issue of “Sustainable Growth the Nordic Way” out now
  6. NORDIC COUNCIL OF MINISTERSThe Nordic gender effect goes international
  7. NORDIC COUNCIL OF MINISTERSPaula Lehtomaki from Finland elected as the Council's first female Secretary General
  8. NORDIC COUNCIL OF MINISTERSNordic design sets the stage at COP24, running a competition for sustainable chairs.
  9. Counter BalanceIn Kenya, a motorway funded by the European Investment Bank runs over roadside dwellers
  10. ACCACompany Law Package: Making the Best of Digital and Cross Border Mobility,
  11. International Partnership for Human RightsCivil Society Worried About Shortcomings in EU-Kyrgyzstan Human Rights Dialogue
  12. UNESDAThe European Soft Drinks Industry Supports over 1.7 Million Jobs

Latest News

  1. Brexit dominates EU affairs This WEEK
  2. How the EU commission got tunnel vision on self-driving cars
  3. No-confidence calls against May put Brexit deal in doubt
  4. Key points of the Brexit deal (if it ever comes into effect)
  5. Romania heaps scorn on 'revolting' EU criticism
  6. US steps in to clean up Cyprus
  7. 'Decisive progress' on Brexit as British cabinet backs deal
  8. Asylum for Macedonia's ex-PM puts Orban on spot

Stakeholders' Highlights

  1. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  2. International Partnership for Human RightsCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  3. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  4. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow
  5. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  6. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  7. Mission of China to the EUChina: Work Together for a Better Globalisation
  8. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  9. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  10. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  11. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network
  12. Mission of China to the EUChina-EU Economic and Trade Relations Enjoy a Bright Future

Join EUobserver

Support quality EU news

Join us