Add a bookmark to get started

neon mirror 1130
10 June 20254 minute read

A Decade of Digital Resilience – NIS2 in Practice Across the CEE Region Conference

10 June 2025 | 9:30 – 14:30 | on-site and online event

Location

InterContinental Emilii Plater 49
00-125 Warsaw

What does the EU Digital Decade actually mean, and what are its practical implications for businesses? As the implementation of key EU legislative acts – such as NIS2, DORA, the Cybersecurity Act, and the Cyber Resilience Act – progresses, both strategic and operational questions continue to arise. These new regulations impose obligations on organisations related to cyber resilience, management body accountability, registration duties, incident reporting, and the implementation of technical and organisational measures in the area of information security.

To address these challenges, the CEE IPT team at DLA Piper invites you to an expert session on 10 June 2025 in Warsaw, from 9:30 to 14:30, where we will present practical approaches to implementing the regulations, with a particular focus on the Central and Eastern European region. Together with our colleagues from the Czech Republic, Slovakia, Romania, Hungary and Austria, we will share our experience working across European markets in the area of cybersecurity and NIS2.

 

Our speakers will include:

Ewa Kurowska-Tober – Attorney-at-law, Partner and Head of the IPT practice at DLA Piper, a recognised advisor in data protection, privacy and cybersecurity, digital regulation and compliance

Nick de Lacy-Brown – Director at the London office of DLA Piper, specialising in data protection, cybersecurity and data governance, including within the framework of digital law regulations forming part of the EU Digital Decade strategy

Piotr Falarz – Advocate and Counsel at DLA Piper, specialising in cybersecurity, anti-money laundering (AML), compliance, internal investigations and white-collar crime as well as

Piotr Czulak and Karol Kuterek, DLA Piper Poland; Sabine Fehringer, DLA Piper Austria; Zoltan Kozma, DLA Piper Hungary; Irina Macovei and Andrei Stoica, DLA Piper Romania; Eva Skottke, DLA Piper Slovakia; Tomas Scerba, DLA Piper Czech Republic

This event is part of the "Digital Decade" regional initiative of DLA Piper’s CEE IPT team. A parallel event will also take place in Vienna, on 28 May 2025 – if you are interested in attending the Vienna session, please contact our team.

Participation is free of charge, but registration is required.

Due to limited seating, registration will be confirmed by the organiser. An online participation option is also available – please indicate your preferred mode of attendance in the registration form.

We warmly invite you to join us!

CEE IPT Team

DLA Piper

Agenda

9:30 – 10:00 – Registration and welcome coffee

10:00 – 10:50 – Overview of the European Digital Decade – EU Cybersecurity Strategy

Setting the scene – why is cybersecurity regulation at the heart of the EU's digital decade strategy?

Panoramic overview of the EU Cybersecurity Strategy

  • NIS2
  • Cyber Resilience Act
  • DORA (brief mention)


NIS2 – Implementation status across the EU (brief overview)
NIS2 – Ancillary guidance and regulation

10:50 – 11:20 – CEE Member State Deep Dive
Focus CEE Member State 1: Poland

Focus CEE Member State 2: Romania

Focus CEE Member State 3: Czechia

Focus CEE Member State 4: Hungary

Focus CEE Member State 5: Austria

Cybersecurity law in the UK – will the new UK Cyber Security and Resilience Bill follow the NIS2 approach?

11:20 – 11:35 – Coffee Break

11:35 – 12:15 – NIS2 – scope of application and key upcoming obligations

  • Cybersecurity measures
  • Supply chain security
  • Incident Reporting
  • Fines


12:15 – 12:35 – NIS2 Sector focus – how is NIS2 playing out in some of the key sectors?

Digital sectors, life sciences and industrials

12:35 – 13:05 – Tricky issues arising out of NIS2

Size criterion and linked/ partner entities
Main establishment test
Management Bodies and personal liability

13:05 – 13:30 Rise of cybercrime in the financial sector in CEE

Impact on financial institutions, businesses and individuals

Prosecution of cybercrime and possible actions in the event of cyber incidents

Case study

13:30 – 14:30 – Close and networking lunch

Speakers

Print