Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

Article 43Amendment of Directive (EU) 2018/1972

In Directive (EU) 2018/1972, Articles 40 and 41 are deleted with effect from 18 October 2024.

NIS2, the European Union directive on network and information security, Article 43

Article 43 deletes Articles 40 and 41 of Directive (EU) 2018/1972, the European Electronic Communications Code, with effect from 18 October 2024. Those articles dealt with the security of networks and services, and with the powers to implement and enforce that security duty.

Providers of public electronic communications networks and publicly available electronic communications services are not left without security rules. They come within this Directive and its Articles 21 and 23, and under Article 2(2) they are in scope regardless of size. Under Article 3, whether they are essential or important entities depends on size. The rest of the Code is unaffected by this article.

Text: Directive (EU) 2022/2555, OJ L 333, 27.12.2022, p. 80, as corrected by Corrigendum OJ L, 2023/90206, 22.12.2023 (Article 19(1): “by 17 January 2025”, replacing “on”), from EUR-Lex. Only the Official Journal text is authentic.