The Commission published their Report to the European Parliament and the Council assessing the extent to which the Member States have taken the necessary measures in order to comply with Directive 2013/40/EU on Attacks against Information Systems and Replacing Council Framework Decision 2005/222/JHA.
The objectives of the Directive are to approximate the criminal law of the Member States in the area of attacks against information systems and to improve cooperation between competent authorities. This is done by establishing minimum rules concerning the definition of criminal offences and sanctions in the area of attacks against information systems and by requiring operational 24/7 points of contact.
Member States were obliged to bring into force the laws, regulations and administrative provisions necessary to comply with the Directive by 4 September 2015.
The aim of the report is to provide a concise yet informative overview of the main transposition measures taken by Member States.
The description and analysis in the report are based on the information that Member States provided by 31 May 2017.
Find the full report here.