Regulating Cyber: the UK's plans for the NIS Directive

If you are a digital service provider or operate an ‘essential service’ then new security and breach notification obligations may soon apply to you. As the UK gets ready to implement the European Security of Network and Information Systems (or NIS) Directive into UK law, the Government has set out its plans for how this new regime will operate, and who will be caught by its reach. In this article, we will look at the Government’s proposals, set out in its recent consultation, and compare these to the requirements of the Directive.