On Tuesday 11 October the European Parliament Committee on Civil Liberties confirmed the interinstitutional agreement reached in June on the resilience of critical entities (see EUROPE 12981/11). The result of the negotiations was approved by 52 votes to 1 with 2 abstentions.
The new rules will establish harmonised minimum rules to ensure that different Member States classify the same providers as critical, as well as risk assessments for critical infrastructure to strengthen their resilience to disruption and hazards, a statement said.
The scope of the directive will be extended to a total of 11 sectors, including energy, transport, banking, financial market infrastructure, health, drinking water, waste water, food, digital infrastructure and space.
Critical service providers will have to carry out their own risk assessment and report disruptive incidents. Member States will also be required to adopt national strategies to build resilience and to carry out regular risk assessments. National authorities should have the possibility to carry out on-site inspections of critical infrastructure and to introduce penalties for non-compliance.
Link to the adopted text: https://aeur.eu/f/3j0 (Original version in French by Solenn Paulic)