Network Information System

(NIS)

Welcome to Seers. Here you can find the official PDF of the NIS (EU) 2016/1148 (Network Information System Directive) as a neatly arranged website. All Articles of the NIS are linked with suitable recitals. The NIS is applicable as of May 25th, 2018 in all member states to harmonize data privacy laws across Europe. If you find the page useful, feel free to support us by sharing the project.

Quick Access

Key Issues

• Fines / Penalties
• Personal Data
• Privacy by Design
• Privacy Impact Assessment
• Processing
• Records of Processing Activities
• Right of Access
• Right to be Forgotten
• Right to be Informed
• Third Countries
• Consent
• Data Protection Officer
• Email Marketing
• Encryption

Table of Contents

Directive

• Directive for the Security of Network and Information Systems

Chapter 1 General Provision

• Subject matter and scope
• Processing of personal data
• Minimum harmonisation
• Definitions
• Identification of operators of essential services
• Significant disruptive effect

Chapter 2 National Frameworks on the Security of Network and Information Systems

• National strategy on the security of network and information systems
• National competent authorities and single point of contact
• Computer security incident response teams (CSIRTs)
• Cooperation at national level

Chapter 3 Cooperation

• Cooperation Group
• CSIRTs network
• International cooperation

Chapter 4 Security of the Network and Information Systems of Operators of Essential Services

• Security requirements and incident notification
• Implementation and enforcement

CHAPTER 5 Security of the Network and Information Systems of Digital Service Providers

• Security requirements and incident notification
• Implementation and enforcement
• Jurisdiction and territoriality

CHAPTER 6 Standardisation and Voluntary Notification

• Standardisation
• Voluntary notification

CHAPTER 7 Final Provisions

• Penalties
• Committee procedure
• Review
• Transitional measures
• Transposition
• Entry into force
• Addressees

Annex

• Requirements and Tasks of Computer Security Incident Response Teams (CSIRTs)
• Types of Entities for the Purposes of Point (4) of Article 4
• Types of Digital Services for the Purposes of Point (5) of Article 4