Cybersecurity: Digital Service Providers should now register with the Digital Security Authority

Pursuant to the recently adopted Law on the Security of Network and Information Systems (L. 89(I)/2020) and relevant secondary legislation, Digital Service Providers that are seated in the Republic should now register with the Cyprus Digital Security Authority (the ‘DSA’). The obligation to register concerns the following types of Digital Service Providers:

• Online marketplaces (e.g. online shops);
• Online search engines, and;
• Cloud computing services.

In addition to the obligation to register with the DSA, Digital Service Providers must also take several further actions within the context of cybersecurity law compliance, including:

• Undertaking appropriate and proportionate technical and organisational measures to manage cybersecurity risks;
• Adopting procedures to prevent and minimise the impact of cybersecurity incidents;
• Notifying cybersecurity incidents to the DSA.

All the above obligations are not applicable to micro and small-sized digital service providers, as defined by the European Commission.

If you provide any of the above digital services, please do not hesitate to contact our firm for advice that is tailored to the particularities of your business.

[This article was prepared by associate Orestis Anastasiades]

The above is intended for general information purposes only and does not constitute legal advice.  For legal issues that arise, please consult legal counsel.