Skip to the text
Text as of 27 Dec 2022 · Directive (EU) 2022/2555, OJ L 333, 27.12.2022 · Same wording as today’s text.Today’s text

Recital 88

Digital & dataLevel 1DirectiveNIS2Stage: AdoptedOfficial source

Essential and important entities should also address risks stemming from their interactions and relationships with other stakeholders within a broader ecosystem, including with regard to countering industrial espionage and protecting trade secrets. In particular, those entities should take appropriate measures to ensure that their cooperation with academic and research institutions takes place in line with their cybersecurity policies and follows good practices as regards secure access and dissemination of information in general and the protection of intellectual property in particular. Similarly, given the importance and value of data for the activities of essential and important entities, when relying on data transformation and data analytics services from third parties, those entities should take all appropriate cybersecurity risk-management measures.