Today, the EU Cybersecurity Act (the "Act") was published in the Official Journal of the European Union. A central pillar of the European Union (EU) cybersecurity strategy, the Act aims to strengthen the cybersecurity features of everyday products and services and boost cyber resilience in the EU. The Act sets out a framework through which ICT products, services and processes may be granted EU-wide cybersecurity certification. The mandate and capabilities of ENISA, the EU Agency for Cybersecurity, are also reinforced by the Act. ENISA will now have more resources at its disposal, as well as new responsibilities, for coordinating and supporting cybersecurity efforts across the EU.

The Act will enter into force 20 days from today, although some of the provisions (such as the ones related to penalties or providing for judicial remedies) will be effective as of June 28, 2021.

(For our past coverage of the Act, see our updates published December 13, 2018, September 17, 2018, and June 11, 2018.)  

Visit us at

Mayer Brown is a global legal services provider comprising legal practices that are separate entities (the "Mayer Brown Practices"). The Mayer Brown Practices are: Mayer Brown LLP and Mayer Brown Europe – Brussels LLP, both limited liability partnerships established in Illinois USA; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales (authorized and regulated by the Solicitors Regulation Authority and registered in England and Wales number OC 303359); Mayer Brown, a SELAS established in France; Mayer Brown JSM, a Hong Kong partnership and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.

© Copyright 2019. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.