Many of the requirements of the NIS Directive and Regulations are aligned to those found in the General Data Protection regulation (GDPR). The main difference between NIS and GDPR is that while the NIS Directive and Regulations only apply to OESs and RDSPs, the GDPR applies to organisations that process personal data. Many organisations will already have implemented measures to support GDPR compliance, and those efforts can help to comply with both standards simultaneously.