{"id":2427,"date":"2018-10-05T14:34:15","date_gmt":"2018-10-05T14:34:15","guid":{"rendered":"https:\/\/vila.es\/en\/?p=2427"},"modified":"2020-11-11T08:56:09","modified_gmt":"2020-11-11T08:56:09","slug":"new-royal-decree-law-on-network-security-and-information-systems","status":"publish","type":"post","link":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/","title":{"rendered":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS"},"content":{"rendered":"

The new Royal Decree-Law 12\/2018 on network security and information systems was published in the Spanish Government\u2019s Official Gazette on 8th<\/sup>\u00a0 September 2018 and entered into force on the following day. This royal decree-law is intended for establishing mechanisms, which from a comprehensive perspective, improve protection against threats to networks and information systems by facilitating the coordination of measures taken in this area both at national and EU level. This royal decree-law transposes EU Directive 2016\/1148 of the European Parliament and of the Council of 6th<\/sup> July 2016 into Spanish Law.<\/p>\n

The royal decree-law applies to entities who render essential services to the community and who depend on networks and information systems for carrying out such activities. Their scope also extends to sectors which are not directly included in the Directive in order to give this royal decree-law a global focus, although the specific legislation is preserved.<\/p>\n

Likewise, the royal decree-law shall apply to certain digital service providers, such as on-line markets, on-line search engines and cloud services.<\/p>\n

In accordance with the Directive, the royal decree-law identifies the sectors in which it is necessary to guarantee the protection of networks and information systems and which establish procedures for identifying essential services offered in said sectors, as well as the main operators who offer said services, which are, ultimately the beneficiaries of this royal decree-law.<\/p>\n

The operators of essential services and digital services providers must adopt technical and organisational measures, which are adequate and proportionate in order to manage the risks, which arise for network security and information systems, which they use, although their management is externalised.<\/p>\n

The operators of essential services shall designate and communicate the name of the person, unit or collegiate body responsible for the security of the information as a point of contact and technical coordination with the competent authorities.<\/p>\n

The providers of digital services shall determine the security measures which shall be applied, taking into account, as a minimum, the technical advances and the following aspects:<\/p>\n

a) The security of the systems and installations;<\/p>\n

b) The management of incidents;<\/p>\n

c) The management of the continuity of the activities;<\/p>\n

d) The supervision, audits and tests;<\/p>\n

e) The fulfilment of international regulations.<\/p>\n

The royal decree-law also requires that the operators of essential services and digital service providers notify the incidents which occur in the networks and information systems which they employ for rendering essential digital services, and which have a significant disruptive impact thereupon, at the same time as anticipating the notification of events or incidents which may affect essential services.<\/p>\n

For notification purposes, the importance of an incident shall be determined bearing in mind, at least the following factors:<\/p>\n

a) The number of affected users due to the disruption of essential services;<\/p>\n

b) The duration of the incident;<\/p>\n

c) The extent or geographic areas affected by the incident;<\/p>\n

d) The level of disturbance to the functioning of the service;<\/p>\n

e) The reach of the impact on crucial economic and social services;<\/p>\n

f) The importance of the affected systems or the information affected by the incident for rendering the essential service;<\/p>\n

g) Damage to reputation.<\/p>\n

The non-fulfilment of the obligation of notification shall be deemed a breach subject to sanctions of fines of up to Euro 1,000,000.<\/p>\n

 <\/p>\n

 <\/p>\n

Mika Tsuyuki<\/p>\n

Vil\u00e1 Abogados<\/p>\n

 <\/p>\n

For more information, please contact:<\/p>\n

va@vila.es<\/a><\/span><\/p>\n

 <\/p>\n

5th<\/sup> of October, 2018<\/p>\n","protected":false},"excerpt":{"rendered":"

The new Royal Decree-Law 12\/2018 on network security and information systems was published in the Spanish Government\u2019s Official Gazette on 8th\u00a0 September 2018 and entered into force on the following day. This royal decree-law is intended for establishing mechanisms, which from a comprehensive perspective, improve protection against threats to networks and information systems by facilitating […]<\/p>\n","protected":false},"author":4,"featured_media":4726,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85,87],"tags":[],"class_list":["post-2427","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection","category-technology"],"yoast_head":"\nNEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados\" \/>\n<meta property=\"og:description\" content=\"The new Royal Decree-Law 12\/2018 on network security and information systems was published in the Spanish Government\u2019s Official Gazette on 8th\u00a0 September 2018 and entered into force on the following day. This royal decree-law is intended for establishing mechanisms, which from a comprehensive perspective, improve protection against threats to networks and information systems by facilitating [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\" \/>\n<meta property=\"og:site_name\" content=\"Vil\u00e1 Abogados\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-05T14:34:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-11-11T08:56:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"669\" \/>\n\t<meta property=\"og:image:height\" content=\"272\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Vil\u00e1 Abogados\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vil\u00e1 Abogados\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\"},\"author\":{\"name\":\"Vil\u00e1 Abogados\",\"@id\":\"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904\"},\"headline\":\"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS\",\"datePublished\":\"2018-10-05T14:34:15+00:00\",\"dateModified\":\"2020-11-11T08:56:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\"},\"wordCount\":563,\"image\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg\",\"articleSection\":[\"Data protection\",\"Technology\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\",\"url\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\",\"name\":\"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados\",\"isPartOf\":{\"@id\":\"https:\/\/vila.es\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg\",\"datePublished\":\"2018-10-05T14:34:15+00:00\",\"dateModified\":\"2020-11-11T08:56:09+00:00\",\"author\":{\"@id\":\"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904\"},\"breadcrumb\":{\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage\",\"url\":\"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg\",\"contentUrl\":\"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg\",\"width\":669,\"height\":272},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/vila.es\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vila.es\/en\/#website\",\"url\":\"https:\/\/vila.es\/en\/\",\"name\":\"Vil\u00e1 Abogados\",\"description\":\"Damos soporte jur\u00eddico a proyectos e iniciativas de negocio de empresas y de emprendedores extranjeros y nacionales\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/vila.es\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904\",\"name\":\"Vil\u00e1 Abogados\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/vila.es\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/80372a28ffd84e8b62261dc710c686e32c574bf8a1c71bfd6ebfba0f351a081b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/80372a28ffd84e8b62261dc710c686e32c574bf8a1c71bfd6ebfba0f351a081b?s=96&d=mm&r=g\",\"caption\":\"Vil\u00e1 Abogados\"},\"url\":\"https:\/\/vila.es\/en\/author\/vilaes\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/","og_locale":"en_US","og_type":"article","og_title":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados","og_description":"The new Royal Decree-Law 12\/2018 on network security and information systems was published in the Spanish Government\u2019s Official Gazette on 8th\u00a0 September 2018 and entered into force on the following day. This royal decree-law is intended for establishing mechanisms, which from a comprehensive perspective, improve protection against threats to networks and information systems by facilitating [...]","og_url":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/","og_site_name":"Vil\u00e1 Abogados","article_published_time":"2018-10-05T14:34:15+00:00","article_modified_time":"2020-11-11T08:56:09+00:00","og_image":[{"width":669,"height":272,"url":"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg","type":"image\/jpeg"}],"author":"Vil\u00e1 Abogados","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Vil\u00e1 Abogados","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#article","isPartOf":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/"},"author":{"name":"Vil\u00e1 Abogados","@id":"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904"},"headline":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS","datePublished":"2018-10-05T14:34:15+00:00","dateModified":"2020-11-11T08:56:09+00:00","mainEntityOfPage":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/"},"wordCount":563,"image":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage"},"thumbnailUrl":"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg","articleSection":["Data protection","Technology"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/","url":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/","name":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS - Vil\u00e1 Abogados","isPartOf":{"@id":"https:\/\/vila.es\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage"},"image":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage"},"thumbnailUrl":"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg","datePublished":"2018-10-05T14:34:15+00:00","dateModified":"2020-11-11T08:56:09+00:00","author":{"@id":"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904"},"breadcrumb":{"@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#primaryimage","url":"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg","contentUrl":"https:\/\/vila.es\/wp-content\/uploads\/2020\/07\/proteccion-de-datos.jpg","width":669,"height":272},{"@type":"BreadcrumbList","@id":"https:\/\/vila.es\/en\/data-protection\/new-royal-decree-law-on-network-security-and-information-systems\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/vila.es\/en\/"},{"@type":"ListItem","position":2,"name":"NEW ROYAL DECREE-LAW ON NETWORK SECURITY AND INFORMATION SYSTEMS"}]},{"@type":"WebSite","@id":"https:\/\/vila.es\/en\/#website","url":"https:\/\/vila.es\/en\/","name":"Vil\u00e1 Abogados","description":"Damos soporte jur\u00eddico a proyectos e iniciativas de negocio de empresas y de emprendedores extranjeros y nacionales","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/vila.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/vila.es\/en\/#\/schema\/person\/1338568a83d16fbfd6073c8cc4834904","name":"Vil\u00e1 Abogados","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/vila.es\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/80372a28ffd84e8b62261dc710c686e32c574bf8a1c71bfd6ebfba0f351a081b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/80372a28ffd84e8b62261dc710c686e32c574bf8a1c71bfd6ebfba0f351a081b?s=96&d=mm&r=g","caption":"Vil\u00e1 Abogados"},"url":"https:\/\/vila.es\/en\/author\/vilaes\/"}]}},"_links":{"self":[{"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/posts\/2427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/comments?post=2427"}],"version-history":[{"count":2,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/posts\/2427\/revisions"}],"predecessor-version":[{"id":8393,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/posts\/2427\/revisions\/8393"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/media\/4726"}],"wp:attachment":[{"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/media?parent=2427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/categories?post=2427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vila.es\/en\/wp-json\/wp\/v2\/tags?post=2427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}