A Decade of Digital Resilience – NIS2 in Practice Across the CEE Region Conference
10 June 2025 | 9:30 – 14:30 | on-site and online event
Location
InterContinental Emilii Plater 49
00-125 Warsaw
What does the EU Digital Decade actually mean, and what are its practical implications for businesses? As the implementation of key EU legislative acts – such as NIS2, DORA, the Cybersecurity Act, and the Cyber Resilience Act – progresses, both strategic and operational questions continue to arise. These new regulations impose obligations on organisations related to cyber resilience, management body accountability, registration duties, incident reporting, and the implementation of technical and organisational measures in the area of information security.
To address these challenges, the CEE IPT team at DLA Piper invites you to an expert session on 10 June 2025 in Warsaw, from 9:30 to 14:30, where we will present practical approaches to implementing the regulations, with a particular focus on the Central and Eastern European region. Together with our colleagues from the Czech Republic, Slovakia, Romania, Hungary and Austria, we will share our experience working across European markets in the area of cybersecurity and NIS2.
Our speakers will include:
Ewa Kurowska-Tober – Attorney-at-law, Partner and Head of the IPT practice at DLA Piper, a recognised advisor in data protection, privacy and cybersecurity, digital regulation and compliance
Nick de Lacy-Brown – Director at the London office of DLA Piper, specialising in data protection, cybersecurity and data governance, including within the framework of digital law regulations forming part of the EU Digital Decade strategy
Piotr Falarz – Advocate and Counsel at DLA Piper, specialising in cybersecurity, anti-money laundering (AML), compliance, internal investigations and white-collar crime as well as
Piotr Czulak and Karol Kuterek, DLA Piper Poland; Sabine Fehringer, DLA Piper Austria; Zoltan Kozma, DLA Piper Hungary; Irina Macovei and Andrei Stoica, DLA Piper Romania; Eva Skottke, DLA Piper Slovakia; Tomas Scerba, DLA Piper Czech Republic
This event is part of the "Digital Decade" regional initiative of DLA Piper’s CEE IPT team. A parallel event will also take place in Vienna, on 28 May 2025 – if you are interested in attending the Vienna session, please contact our team.
Participation is free of charge, but registration is required.
Due to limited seating, registration will be confirmed by the organiser. An online participation option is also available – please indicate your preferred mode of attendance in the registration form.
We warmly invite you to join us!
CEE IPT Team
DLA Piper
Agenda
9:30 – 10:00 – Registration and welcome coffee
10:00 – 10:50 – Overview of the European Digital Decade – EU Cybersecurity Strategy
Setting the scene – why is cybersecurity regulation at the heart of the EU's digital decade strategy?
Panoramic overview of the EU Cybersecurity Strategy
- NIS2
- Cyber Resilience Act
- DORA (brief mention)
NIS2 – Implementation status across the EU (brief overview)
NIS2 – Ancillary guidance and regulation
10:50 – 11:20 – CEE Member State Deep Dive
Focus CEE Member State 1: Poland
Focus CEE Member State 2: Romania
Focus CEE Member State 3: Czechia
Focus CEE Member State 4: Hungary
Focus CEE Member State 5: Austria
Cybersecurity law in the UK – will the new UK Cyber Security and Resilience Bill follow the NIS2 approach?
11:20 – 11:35 – Coffee Break
11:35 – 12:15 – NIS2 – scope of application and key upcoming obligations
- Cybersecurity measures
- Supply chain security
- Incident Reporting
- Fines
12:15 – 12:35 – NIS2 Sector focus – how is NIS2 playing out in some of the key sectors?
Digital sectors, life sciences and industrials
12:35 – 13:05 – Tricky issues arising out of NIS2
Size criterion and linked/ partner entities
Main establishment test
Management Bodies and personal liability
13:05 – 13:30 Rise of cybercrime in the financial sector in CEE
Impact on financial institutions, businesses and individuals
Prosecution of cybercrime and possible actions in the event of cyber incidents
Case study
13:30 – 14:30 – Close and networking lunch