Reply to post:

I suspect in years to come we'll see the Network and Information System Regulation grow arms and legs, if it ever applies in a mandatory way to anything outside of critical national infrastructure it'll be a wake up calls to large companies.