EDPB-EDPS Joint Opinion on Cybersecurity Act 2 and NIS 2 Directive Amendments

The EDPB and EDPS have released a joint opinion (4/2026) offering recommendations on two key EU legislative proposals: the Cybersecurity Act 2 and amendments to the NIS 2 Directive. The opinion addresses the implications of these proposals for data protection and cybersecurity frameworks within the European Union, likely focusing on aspects related to data processing, certification schemes, and incident reporting.

This document is a consultation response and serves to inform the legislative process. While non-binding, it signals the data protection authorities' perspective on these critical cybersecurity initiatives. Regulated entities, particularly those in the technology and telecommunications sectors, should review the opinion to understand potential future regulatory directions and ensure their compliance strategies align with evolving EU cybersecurity and data protection requirements.