Review of the Telecom Framework – Security rules Security rules in the proposed European Electronic Communications Code (EECC) Lisbon, 8 March 2017

EECC – Security of Networks and Services Security rules in the Framework Directive 2002/21 Article 13a – Security and integrity Appropriate organisational measures to manage risks to security of networks and services Appropriate steps to guarantee integrity of networks and thus continuity of the services Notification of significant security breaches Commission implementing measures

EECC – Security of Networks and Services Security rules in the Framework Directive 2002/21 Article 13b – Implementation and Enforcement Powers of National Regulatory Authorities (NRAs) Binding instructions Request for information Security audits Powers of investigation

EECC – Security of Networks and Services Relationship with other laws Data Protection Directive 95/46 ePrivacy Directive 2002/58 General Data Protection Regulation 679/2016 NIS Directive 2016/1148

EECC – Security of Networks and Services EECC new proposed rules – Artt. 40 and 41 EECC General objectives Ensure high-level of security of networks and services Adapt to technological changes Clarify terms and critical aspects External consistency with NIS, GDPR and ePD Improve cooperation and enforcement

EECC – Security of Networks and Services Article 40 EECC – Security of Networks and Services Wider scope: Number-independent (Ni) interpersonal communications services (ICS) Proportionality based approach for Ni ICS Notion of security Comprehensive definition Alignment with the NIS Directive Incident notification rules Criteria for notifying breaches Timing of notifications

EECC – Security of Networks and Services Article 41 EECC – Implementation and Enforcement Competent authorities Cooperation with Computer Security Incident Response Teams (CSIRTs) Cooperation with NIS, Data Protection and Law Enforcement authorities Relationship with other laws NIS Directive GDPR ePrivacy

EECC – Security of Networks and Services Thank you!