Translations:Network and Information Security Directive (NIS2-RL)/157/en

• **GDPR**: Requires a Data Protection Impact Assessment (DPIA) if high risks to individuals are anticipated (Art. 35 GDPR), including detailed risk evaluation and mitigation.
• **NIS2**: Requires regular assessments of network and information system risks, identifying cybersecurity risks and mitigation strategies—these are broader and cover all critical infrastructure.