Notification requirements in the NIS2, DORA, GDPR: an overview
Under the GDPR, your organisation is required to notify personal data breaches. With a new set of EU legal frameworks on the horizon, additional notification obligations for cyber and data incidents are being introduced. These new notification requirements are, however, far from harmonised or streamlined.
Beltug and DLA Piper have collaborated to put together a practical overview of the notification requirements under the NIS2, DORA and GDPR.
22 / 03 / 24
The joint paper by paper by Beltug and DLA Piper offers a comprehensive overview of the three legislative instruments, plus a more detailed description of the notification requirements under each. And it highlights the ‘interplay’ between the notification obligations, for example when a single cyber or data incident might need to be reported to various authorities because of the requirements in the different legal acts and directives.