Document Actions

New EU cybersecurity law avoids making big Internet companies report breaches

ComputerWorldUK - Glyn Moody - Europe on Thursday approved a new cybersecurity law, but held back from requiring Internet giants such as Google, Amazon, Ebay and Skype, to report security incidents.

Members of the European Parliament voted by a huge majority to approve the Network and Information Security (NIS) directive.

Under the original proposals, so-called "enablers of information society services" would have been required to report any security breach that has "significantly affects the continuity of critical services and supply of goods" to a national authority, whether data had been compromised or not.

But the law as approved by parliament on Thursday now extends only to companies that own, operate or provide technology for critical infrastructure facilities.