Cloud Service Providers Under the NIS Directive – The UK's Implementation (With GDPR Comparisons)

Abstract

This article analyses how the UK implemented the EU Network and Information Systems Security Directive, focusing on its impact on cloud computing service providers. It highlights some UK divergences, whether through policy choice or error, noting issues with the consultation process. It also compares security and notification obligations on cloud providers under the Directive and the EU General Data Protection Regulation.

Keywords: Cloud Computing, NIS Directive, Security, Cybersecurity, Network And Information Systems Security, GDPR, General Data Protection Regulation, Data Protection, EU, European Union

JEL Classification: K2, K22, K23, K29, K33