The European Data Protection Board and European Data Protection Supervisor have issued a joint opinion on two legislative proposals: the Cybersecurity Act 2 and amendments to the NIS 2 Directive.…
EDPB-EDPS Joint Opinion 4/2026 on the Proposal for a Cybersecurity Act 2 and the Proposal on amendments to the NIS 2 Directive
Network and Information Security Directive (NIS2). Sourced from EDPB, summarised by Matproof.
AI Analysis
What changed and what to do.
The European Data Protection Board and European Data Protection Supervisor have issued a joint opinion on the proposed Cybersecurity Act 2 and amendments to the NIS 2 Directive. This opinion provides a critical assessment from a data protection perspective, focusing on the interplay between new cybersecurity obligations and existing EU data protection law, particularly the GDPR.
The opinion is primarily relevant to entities already within the scope of the NIS 2 Directive, including essential and important entities across sectors like energy, transport, banking, and digital infrastructure. It also concerns EU institutions and bodies that would be subject to the new Cybersecurity Act 2 framework.
Compliance teams should review this joint opinion to understand the supervisory authorities' key concerns regarding jurisdictional overlap, incident reporting, and potential conflicts of law. The next step is to monitor the legislative process for these proposals, as the opinion will inform upcoming negotiations and final texts. Teams should prepare to integrate these future cybersecurity requirements with existing data protection compliance programs.
This summary is AI-generated for orientation purposes. For regulatory action, always consult the original source linked above.
More NIS2 updates
Latest in Network and Information Security Directive (NIS2).
The French National Agency for the Security of Information Systems (ANSSI) has published new guidance and support initiatives to aid in the implementation of the transposed NIS2 Directive. This…
The French National Cybersecurity Agency (ANSSI) has announced the opening of a pre-registration portal for entities in scope of the NIS 2 Directive. This is a key procedural step ahead of the formal…
The European Data Protection Board (EDPB) has published its agenda for the IAPP Global Summit 2026, highlighting key regulatory priorities. This agenda signals the EDPB's focus on the operational…
Map this to your controls
Connect regulatory changes to your compliance work.
Matproof maps every regulator update directly to your controls and surfaces the ones that affect your organisation — across 21 frameworks.