The EU has introduced the NIS Directive to protect network and information systems from cyber threats. This legislation aims to ensure the smooth operation of IT services and critical infrastructures within the Union. ENISA plays a crucial role in implementing the Directive, supported by the proposed EU Cybersecurity Act. The NIS Directive is closely linked to the General Data Protection Regulation, emphasizing the importance of cybersecurity in safeguarding personal data.