EU Security and Privacy Laws: What to Expect in 2023 and beyond

In the modern era, it’s indisputable: data is king. Organizations know it. The more data they collect, the more insightful their decision-making becomes. And, less resource drain goes into trial-and-error.

Of course, business heads are not the only ones who recognize the value of data. Cybercriminals have also caught on and targeted organizational weaknesses or oversights to exploit for their gain. With a rise in cybercrime and data theft, the struggle persists between businesses and bad actors to see who will come out on top.

As such, governments and policymakers have focused on mitigating risk through regulatory and compliance measures. In the US, the Biden administration has published the National Cybersecurity Strategy, which seeks “to secure the full benefits of a safe and secure digital ecosystem for all Americans.”

In the EU, on the other hand, the next two years are crucial as approaching compliance deadlines will impact all sectors.

Digital Services Act (DSA) – February 2023

The Digital Services Act (DSA) defines a set of rules that will foster innovation, growth and competitiveness, and facilitate scaling for smaller platforms, including startups and SMEs. The DSA is an EU law that will limit the spread of illegal digital content through a new set of obligations to establish a safe, secure online environment for all.

The DSA applies to marketplaces, online platforms, and hosting services that offer their goods or services in the EU. If successful, the DSA will safeguard the rights to freedom of information and expression and is rooted in a desire to keep fundamental rights protection as a core tenant of regulation.

Digital Markets Act (DMA) – May 2023

The This article has been indexed from Thales CPL Blog Feed