The Cybersecurity Act (Cbw), which goes into effect in the fourth quarter of 2025, brings significant changes for municipalities. In a member letter, we inform what municipalities can expect and how they can already prepare for it.
VNG member letter Consequences Cyber Security Act for municipalities (pdf, 94 kB)
Digital resilience
The new Cybersecurity Act is an important step in strengthening the digital security and resilience of municipalities, allowing them to be better protected against cyber threats and provide a safe environment for their residents. Municipalities must improve their digital resilience to better protect essential processes such as financial administration, civic affairs and traffic control systems. Without adequate information security, municipalities are at risk of disruptions to vital services, financial losses and loss of resident trust.
Duty of care and duty of notification
Under the new law, municipalities become explicitly responsible for managing cyber risks. The municipal executive committee must approve information security measures and administrators must undergo mandatory training to identify and evaluate risks. There will also be a duty to report serious digital incidents, with the Information Security Service (IBD) providing support.
Supervision and sanctions
The municipal council must oversee compliance with the law, while the Rijksinspectie Digitale Infrastructuur (RDI) oversees government-wide compliance. Violations of the duty of care and duty of notification can result in administrative fines of up to €10 million for the municipal organization and personal fines of up to €25,000 for administrators who do not attend mandatory training.
Preparation for the law
Municipalities can prepare by working according to the Government Information Security Baseline (BIO), using an Information Security Management System (ISMS), and promoting awareness and training for administrators.
Invited webinar for directors
To further inform you in response to this letter and answer questions, we invite you to a webinar on Thursday, May 15 at 10:00 a.m. This webinar is designed specifically for administrators. Mayors Meerts and Weststeijn, and Alderman van Dijk will be present.
Learn more
