New cybersecurity laws submitted to House of Representatives
The bills for the Cybersecurity Act (Cbw) and the Critical Entity Resilience Act have been submitted to the House of Representatives. These laws transpose the European NIS2 and CER directives into national legislation. The goal is to strengthen the resilience of EU member states against threats.
Digitale Overheid June 18, 2025
In February 2025, the Raad van State issued an opinion on both bills. Now they have been sent to the House of Representatives. After approval by the House of Representatives, consideration by the Senate will follow. The planned entry into force has been adjusted to the 2nd quarter of 2026. This depends on the progress of the parliamentary treatment of the bills.
Preparation
Until coming into force, there are no obligations for organizations from the CER and NIS2 Directives. However, some provisions of the NIS2 directive already have direct effect. For example, organizations can receive assistance from a Computer Security Incident Response Team (CSIRT).
The Rijksoverheid is urging organizations to prepare for the new legislation. After all, the risks organizations face are already present.
