NIS2 în România: Încep amenzile pentru nerespectarea regulilor de securitate cibernetică. Pot ajunge la 10 milioane de euro

Romania has begun imposing fines for non-compliance with NIS2 cybersecurity regulations, which can reach up to 10 million euros. The National Cyber Security Directorate (DNSC) is targeting companies that failed to register as required. Compliance involves establishing a governance system for risk management and incident response, overseen by company leadership. The NIS2 directive aims to enhance cybersecurity across critical sectors, including energy, transport, and healthcare. Organizations are categorized as essential or important based on their impact on public safety and economy. Fines vary based on the severity of violations, with specific amounts outlined for different categories of entities. Companies must notify DNSC within 30 days of becoming subject to the law, with subsequent deadlines for risk assessments and security evaluations.