On 3 December 2024, ENISA published the first report mandated by the NIS2 Directive (Art. 18). It assesses cybersecurity strengths, weaknesses, and capabilities across the EU, covering Member States, private sector entities, and cooperation mechanisms. The findings highlight uneven maturity levels and call for stronger cross-border coordination.
🔗 ENISA – State of Cybersecurity in the EU
CNIL outlines obligations for health professionals conducting internal research
CNIL reminds health establishments that internal research must follow data‑protection rules, including lawful bases, safeguards, and impact assessments.