Pursuant to the recently adopted Law on the Security of Network and Information Systems (L. 89(I)/2020) and relevant secondary legislation, Digital Service Providers that are seated in the Republic should now register with the Cyprus Digital Security Authority (the ‘DSA'). The obligation to register concerns the following types of Digital Service Providers:
- Online marketplaces (e.g. online shops);
- Online search engines, and;
- Cloud computing services.
In addition to the obligation to register with the DSA, Digital Service Providers must also take several further actions within the context of cybersecurity law compliance, including:
- Undertaking appropriate and proportionate technical and organisational measures to manage cybersecurity risks;
- Adopting procedures to prevent and minimise the impact of cybersecurity incidents;
- Notifying cybersecurity incidents to the DSA.
All the above obligations are not applicable to micro and small-sized digital service providers, as defined by the European Commission.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
