President of the Republic promulgates new Cybersecurity Law (NIS2)

Portuguese President Marcelo Rebelo de Sousa has enacted the new Cybersecurity Law, known as NIS2, which significantly strengthens the legal framework for cybersecurity within the European Union. This move is crucial as it mandates enhanced security measures for both public and private entities deemed critical infrastructure, reflecting the growing importance of digital security. This legislative update underscores a proactive approach to safeguard digital assets and critical services. The NIS2 directive, adopted across the EU in 2022, introduces more stringent cybersecurity requirements, expanding the scope of entities covered compared to its predecessor. Following approval by the Assembly of the Republic, the law aims to improve the resilience of essential services and digital providers. These requirements include incident reporting and risk management protocols, impacting a broad range of sectors. The new law directly affects organizations identified as essential or important, including those in energy, transportation, healthcare, and digital infrastructure. It has broad implications for businesses and public bodies, demanding substantial investment in cybersecurity measures and compliance. This ultimately promotes a more secure digital landscape for all citizens. This law is a crucial step in aligning Portugal's cybersecurity posture with EU standards and enhancing digital sovereignty. This move sets the stage for a more unified and robust approach to cybersecurity across Europe, particularly as digital threats evolve.