Cybersecurity in the European Union: going beyond the ‘Brussels Effect’
Wednesday 6 December 2023
09:00 to 17:00
CEPS – Place du Congrès 1 – 1000 Brussels
The EU often claims to be a global regulatory hegemon. Indeed, the EU legal system is characterised by several features that make it easier for the EU to export its regulatory decisions. Historical ties with many countries have allowed EU legal traditions to continue to influence other countries’ legal systems. Furthermore, the EU’s constant goal to reach consensus among different legal traditions, political inclinations, policymaking styles and the degree of economic development suggests that EU law is still an appealing reference point for a wide range of other countries. This phenomenon has been termed the “Brussels Effect” to emphasise Europe’s truly global footprint when it comes to triggering regulatory replication in other legal systems.
The poster child of the Brussels Effect is the General Data protection Regulation (GDPR), which has been imitated in many countries worldwide since it came into force in 2018. The GDPR’s success has generated expectations that the EU should become a leading player in regulating digital markets. Cybersecurity is a case in point.
Starting in 2016 with the NIS Directive, through to the Cybersecurity Act in 2019, there has been a wealth of legislative and non-legislative cyber initiatives put forward by the EU, the pinnacle being the proposed Cyber Resilience Act (CRA) that represents the first comprehensive regulation for products with digital elements in the world.
However, even the actively imitated GDPR has highlighted problems when it comes to implementation and effective enforcement. Therefore, this year’s CEPS Cybersecurity Summit will be devoted to how we can go beyond the Brussels effect. Or, to put it another way, how to address the challenges of moving from this wealth of cyber policy initiatives to concrete action and policy implementation amid the increasing challenges posed by the changing cybersecurity landscape in the EU. Specifically, we’ll be looking at the levels of coherence and consistency among the different legislations, compliance measures and how the current EU cyber regulatory acquis could be leveraged to promote international standards and regulatory cooperation with other countries.
See the full agenda
Download the final Task Force report
