Source: https://www.paulfoleylaw.ie/the-new-eu-cyber-security-regime/
Timestamp: 2020-08-06 01:23:47
Document Index: 278620265

Matched Legal Cases: ['art 4', 'art 5', 'art 2', 'ART 1', 'art 2', 'art1', 'art 1', 'art 1', 'art 1', 'art 1', 'art 1']

The new EU Cyber Security Regime - Paul Foley Law - Corporate Law Specialist
The new EU Cyber Security Regime
The new EU Cyber Security Regime relates to the security of network and information systems, as they play an essential role in facilitating the cross-border movement of goods, services and people.
The Regime comprises, Directive (EU) 2016/1148, (known as the Network and Information Security Directive or Cyber Security Directive) implemented in Ireland by SI No 360 of 2018, the Commission Implementing Regulation (EU) 2018/151 (which lays down further elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact) and the Cyber Security Act 2019.
The Cyber Security Directive
(a) lays down obligations for all Member States to adopt a national strategy on the security of network and information systems;
(b) creates a Cooperation Group in order to support and facilitate strategic cooperation and the exchange of information among Member States and to develop trust and confidence amongst them;
(c) creates a computer security incident response teams network (‘CSIRTs network’) in order to contribute to the development of trust and confidence between Member States and to promote swift and effective operational cooperation;
(d) establishes security and notification requirements for operators of essential services (see Schedule 1 to SI 360 of 2018 ) and for digital service providers (online marketplaces, online search engines and cloud computing services) (although the regulations exclude microenterprises or small enterprises, from the definition of relevant digital service provider). The obligations for operators of essential services are primarly set out in Part 4 and in Part 5 for digital service providers (of SI 360 of 2018). In the case of digital service providers additionally the obligations in the Commission Implementing Regulation apply;
(e) lays down obligations for Member States to designate national competent authorities, single points of contact and CSIRTs with tasks related to the security of network and information systems. In Ireland, the computer security incident response team being a unit of the Department of Communications, Climate Action and Environment is the Irish “CSIRT”;
The Cyber Security Act 2019 (Regulation (EU) 2019/881 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification)(Act)
(a) strengthens the role and powers of ENISA (the European Union Agency for Cyber Security) (See Title II to the Act) and in particular Article 8 on Market, cybersecurity certification and standardisation); and
(b) establishes an EU cybersecurity certification framework (see Title III Articles 46 to 65) which will allow the emergence of certification schemes for specific categories of ICT products, processes and services. See in particular Article 52 which provides that “a European cybersecurity certification scheme may specify one or more of the following assurance levels for ICT products, ICT services and ICT processes: ‘basic’, ‘substantial’ or ‘high’.”
Putting share option plans in place
Corporate vehicles available in Ireland
EU Anti Money Laundering and Anti Terrorist Financing Regime
https://ec.europa.eu/digital-single-market/en/online-platforms-digital-single-market
Impact Assessment Part 2 page 51 footnote 32
Impact Assessment where used in this Article means, document reference “Brussels, 26.4.2018 SWD(2018) 138 final PART 1/2 COMMISSION STAFF WORKING DOCUMENT IMPACT ASSESSMENT Accompanying the document Proposal for a Regulation of the European Parliament and of the Council on promoting fairness and transparency for business users of online intermediation services”. See Impact Assessment Part 2, page 51, footnote 32.
Article 15 of the Platforms Regulation
Recital (46) of the Platforms Regulation
see Article 14 generally of the Platforms Regulation
Article 12(6) of the Platforms Regulation
Article 12(2) of the Platforms Regulation
Article 12 (1) of the Platforms Regulation
Article 11 of the of the Platforms Regulation
Impact Assessment Part1, page 18 under par 2.1.2.
Impact Assessment, Part 1, page 17 under par 2.1.2
Article 10(2) of the Platforms Regulation
Article10(1) of the Platforms Regulation
Impact Assessment, Part 1, page 17 under par 2.1.1.6
Article 9(3) of the Platforms Regulation
Article 9(2) of the Platforms Regulation
Article 9(1) of the Platforms Regulation
Article 7(3) of the Platforms Regulation
Article 7(2) of the Platforms Regulation
Impact Assessment Part 1 page 16
Article 6 of the Platforms Regulation
Article 2(12) 'ancillary goods and services' means goods and services offered to the consumer prior to the completion of a transaction initiated on the online intermediation services in addition to and complementary to the primary good or service offered by the business user through the online intermediation services.
Impact Assessment page 17 of Part 1
Article 5(7) of the Platforms Regulation
Recital 27 of the Platforms Regulation
Article 5(6) of the Platforms Regulation
Article 5(5) of the Platforms Regulation
Article 5(4) and Recital 26 of the Platforms Regulation
Article 5(2) of the Platforms Regulation
In Article 5(3) of the Platforms Regulation
Article 5(1) of the Platforms Regulation
ranking means the relative prominence given to the goods or services offered through online intermediation services, or the relevance given to search results by online search engines, as presented, organised or communicated by the providers of online intermediation services or by providers of online search engines, respectively, irrespective of the technological means used for such presentation, organisation or communication; (Article 2(8))
Article 8 of the Platforms Regulation
Article 3(3) of the Platforms Regulation
Article 4 of the Platforms Regulation
Article 11 internal complaint-handling process
Article 3(2) of the Platforms Regulation
Recital (17) of the Platforms Regulation
Recital (16) of the Platforms Regulation
as defined in Article 2(10) of the Platforms Regulation
The Impact Assessment referred to potentially harmful trading practices. These included (i) sudden unexplained changes in terms and conditions unilaterally imposed by platforms without prior notice, (ii) delisting of products, services or businesses or suspension of accounts without clear statement of reasons (iii) issues related to ranking of business users or their offers (iv) Issues related to data access and use (v) discrimination of businesses and favouring of online platform's own competing services and (vi) lack of effective redress for business users. These amongst other matters are the drivers of the obligations below.
Article 1(3). of the Platforms Regulation
Article 1(2) of the Platforms Regulation
See Recital (11) of the Platforms Regulation for more detail.
business user means any private individual acting in a commercial or professional capacity who, or any legal person which, through online intermediation services offers goods or services to consumers for purposes relating to its trade, business, craft or profession (Article 2(1))
Online intermediation services’ means services which meet all of the following requirements: (a) they constitute information society services within the meaning of point (b) of Article 1(1) of Directive (EU) 2015/1535 (Laying down a procedure for the provision of information in the field of technical regulations and rules on Information Society services), (b) they allow business users to offer goods or services to consumers, with a view to facilitating the initiating of direct transactions between those business users and consumers, irrespective of where those transactions are ultimately concluded; (c) they are provided to business users on the basis of contractual relationships between the provider of those services and business users which offer goods or services to consumers (Article 2(2))
corporate website users means any natural or legal person which uses an online interface, meaning any software, including a website or a part thereof and applications, including mobile applications, to offer goods or services to consumers for purposes relating to its trade, business, craft or profession. (Article 2(7))
‘online search engine’ means a digital service that allows users to input queries in order to perform searches of, in principle, all websites, or all websites in a particular language, on the basis of a query on any subject in the form of a keyword, voice request, phrase or other input, and returns results in any format in which information related to the requested content can be found (Article 2(5))
https://ec.europa.eu/commission/presscorner/detail/en/MEMO_19_1169
Impact Assessment Part 1, Page 3, under paragraph 1.2