Yesterday, 18 March 2026, the European Data Protection Board and the EDPS - European Data Protection Supervisor adopted Joint Opinion on the European Commission’s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network and Information Security 2 (NIS2) Directive, accessible here.