Ley de Ciberseguridad (España)

Ley de Coordinación y Gobernanza de la Ciberseguridad (Law on Cybersecurity Coordination and Governance) is a Spanish law designed to strengthen the protection of networks and information systems against cyber threats. It aims to transpose the NIS2 Directive into Spanish law, establishing a National Cybersecurity Center to coordinate cybersecurity activities and serve as the primary point of contact with the EU. The law affects both public and private entities with tax residence in Spain or operating within the country, particularly those in critical sectors such as energy, transport, finance, health, and digital infrastructure. It mandates risk assessments, implementation of security measures, incident reporting, and the designation of an information security officer.