Spain faces a significant delay in the implementation of European cybersecurity regulations
Spain is currently accumulating a delay of more than 640 days in transposing the European NIS2 directive into its national legislation. The main objective of this regulation is to strengthen the security of networks and information systems throughout the European Union in the face of increasing digital threats.
Although the Spanish State has not yet completed this legal process, companies operating in the country do not have the same margin of time. Many organizations are already required to comply with the cybersecurity standards demanded by Europe, which creates a situation of uncertainty for the Spanish business sector.
The NIS2 directive is especially relevant due to the constant advancement of artificial intelligence and its impact on IT security. This new regulation seeks to make companies more resilient against potential cyberattacks, establishing stricter rules on how they must protect their data and critical infrastructure.
Experts warn that the lack of a clear national law makes it difficult for companies to know exactly what measures they must implement. In the meantime, companies must prepare to comply with European requirements, as cybersecurity has become an absolute priority to protect the country's economy and essential services.