Cyprus: Cybersecurity

The European Union has spent the last decade reshaping the digital regulatory landscape through landmark legislation such as the General Data Protection Regulation (GDPR) and the AI Act. The European Health Data Space (EHDS) Regulation is the next significant step in that evolution. While often described as a healthcare initiative, the EHDS is at its core a data governance framework designed to unlock the value of electronic health data while safeguarding fundamental rights and promoting innovation.

Cyprus financial services firms face a new era of digital operational resilience supervision as CySEC shifts focus from policy preparation to practical implementation, evidence-based governance, and third-party ICT oversight under DORA. Recent circulars C751 and C784 make clear that regulated entities must now demonstrate operational compliance through documented frameworks, incident readiness, and board-level accountability rather than merely maintaining policies on paper.

The European Commission has unveiled the European Technological Sovereignty Package, a comprehensive legislative framework targeting four critical areas: semiconductor manufacturing through Chips Act 2.0, cloud and AI infrastructure via the Cloud and AI Development Act, digital autonomy through open source strategy, and energy sector digitalization. This ambitious initiative aims to fundamentally transform Europe's technological independence and competitive position in the global digital economy by 2030.

On 31 January 2025, the Cyprus Securities and Exchange Commission (CySEC) launched a consultation on proposed annual information...

On the 15th of January 2025, the European Commission published Commission Recommendation (EU) 2025/63 on reviewing outbound investments in technology areas critical for the economic security of the Union (the "Recommendation").

The Digital Operational Resilience Act (DORA) is set to come into effect soon, reflecting the European Union (EU) regulators' efforts to strengthen the IT security of financial entities.

SIS is a public security initiative through which Member States created a shared database to accommodate a few purposes such as: border control, policing, public security. The database which includes...

On the 18th of April 2023, the European Commission issued a proposal for a Regulation to improve the preparedness, detection and response to significant and large-scale cybersecurity incidents...

In the past month, the University of Cyprus, the Land Registry and the Open University of Cyprus have all fallen victim to cyber hacking. In the wake of this, the Cyprus Mail...