Position paper – Draft implementing regulation on cybersecurity risk-management measures and significant incident reporting
The EUDCA welcomes the specifications, that the European Commission has laid out, on the NIS2 reporting requirements and risk-management measures that data centre operators will need to incorporate into their operations but is under the impression that both have the potential to lead to an increase in the administrative burden for data centre operators. Additionally, the current implementing regulation does not specify the differences between the different data centre business models and thus colocation data centre operators are at risk to breach the confidentiality agreements with their clients.