Translations:Network and Information Security Directive (NIS2-RL)/153/en

• **GDPR**: Requires appropriate technical and organisational measures proportional to the risks to individuals’ rights and freedoms (Art. 24, 32 GDPR), such as encryption, pseudonymisation, access control, and backups.
• **NIS2**: Requires risk management for network and information systems based on potential cyber risks, focusing on availability, integrity, and confidentiality (Art. 21 NIS2). Measures include network security controls, threat detection, and incident response plans.