On Jan. 14, ESP GVT presented future law on cybersecurity.
ESP GVT presented the future Law on Cybersecurity Coordination and Governance.
Its objective is to strengthen protection of networks and information systems, subject to serious cyber threats, risks that require adapted, coordinated, innovative responses.
Follows ESP GVT Jan. 2024 proposed 3 major consensuses for legislation, #199482.
Overview
Minister of the Interior presented the draft proposed in collaboration with Ministries of Defense and for Digital Transformation and Civil Service.
To be processed via urgent procedure and count with required reports from different bodies, Council of State opinion before Council of Ministers approves its submission.
It is recalled number, magnitude, sophistication, frequency and effects of cyber incidents represent serious threat to functioning of networks and information systems.
They can disrupt economic activities, undermine user confidence, cause great damage to economy, society, national security, permanent effort required to deal with them.
The aim of the law is to improve security preparedness, incorporate into national law EU regs aimed at guaranteeing high common level of cybersecurity in all EU states.
Cybersecurity rules to be implemented will affect public and private entities that have tax residence in Spain and those that have tax residence in another EU State but carry out their activity or offer their services in the country.
Covers entities that operate in sectors considered highly critical for normal functioning of country: energy, transport, banking and financial markets, health, water, digital infrastructures and technological services, public administration and nuclear industry.
Other less critical services also included in the future law are postal, courier services, waste management, food production, processing and distribution; digital service providers; scientific research and private security; further details are provided.
So bill can be approved by ESP GVT in second round as soon as possible, sent to PRL.
In this phase, Interior Ministry will collect required reports from Ministries of Defense, Digital Transformation and Civil Service, and Finance, Department of National Security.
8 other ministerial departments to be asked for opinion, as well as Office of Regulatory Coordination and Quality, ESP CB, ESP DP and mandatory opinion of Council of State.
Ministry of the Interior will immediately notify EC of approval of draft bill, given that deadline for transposition of NIS 2 into Spanish domestic law expired Oct. 17, 2024.
Regulators
ESP GVT
Entity Types
Corp
Reference
Bill, PR, 1/14/2025; NIS Dir 2016/1148, NIS 2 Dir 2022/2555
