EDPB and EDPS support strengthening EU’s cybersecurity and easing compliance while protecting individuals’ personal data (edpb.europa.eu)

• Call for EDPB/EDPS consultation on all security certification schemes
• Support for single-entry point for personal data breach notifications
• Classification of identity wallet providers as essential entities

"The European Data Protection Board and Supervisor have issued a joint opinion on the Commission's proposed cybersecurity package (CSA2 and NIS2 amendments). While supporting the enhancement of ENISA’s mandate and the reduction of compliance burdens through a single-entry point for breach notifications, they underscore that cybersecurity measures must not compromise fundamental privacy rights. The regulators urge explicit coordination mechanisms, requiring ENISA to consult them on certification schemes to ensure GDPR consistency. Furthermore, they advocate for the inclusion of business and digital identity wallet providers as essential entities within the revised NIS2 framework, ensuring high-level security standards alongside stringent data processing limitations."