Cybersecurity Act divides business representatives
Amendments to Poland’s cybersecurity law are dividing the business community, with disputes slowing legislative work amid strong lobbying. The revised Act on the National Cybersecurity System is meant to implement the EU’s NIS2 directive and would significantly expand the number of regulated entities — from hundreds to potentially over 40,000. According to Ministry of Digital Affairs, the most controversial provisions allow excluding “high-risk vendors” from parts of the market for security reasons.
Officials argue that removing these rules would weaken national security and expose Poland to EU penalties and the loss of Recovery Fund (KPO) money. Businesses fear high compliance costs and severe fines, although authorities stress that the toughest penalties would apply only in exceptional cases.
(wnp.pl)