This article was collected and archived by Digital Sovereignty Watch from an institutional or public source relevant to digital sovereignty, technology policy, cybersecurity, cloud services, artificial intelligence or European regulation.
Data Sovereignty
EPDB and EDPS Support Strengthening EU Cybersecurity
The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have issued a joint position on the draft Cybersecurity Act 2 (CSA2) presented by the European Commission and on proposed amendments to Directive on Security of Network and Information Systems 2 (NIS2). While cybersecurity enhances personal data protection by reducing risks of unauthorized access, changes, or data unavailability, it is crucial to ensure security controls do not compromise fundamental rights and freedoms. The EDPB and EDPS support strengthening the role of the European Union Agency for Cybersecurity (ENISA) and facilitating cybersecurity certification, as well as addressing supply chain risks, including non-technical ones. They emphasize that if ENISA’s management board adopts additional measures related to EU data protection regulations, these should be limited to technical details concerning data processing. The joint position welcomes potential synergies between ENISA and other EU bodies and recommends explicitly referencing the EDPS as a partner. They also support establishing a single contact point for data breach notifications to reduce administrative burden without compromising data protection levels.