BRUSSELS (Reuters) – EU lawmakers & member states struck a deal on a new cybersecurity law on Monday that will for the first time force Internet firms such as Google & Amazon to report serious breaches or face sanctions, an EU source said.
"We have found an agreement," a source with EU president Luxembourg told Reuters. The deal came after five hours of negotiations between European Parliament & EU countries.
The Network & Information Security Directive sets out security & reporting obligations for companies in critical sectors such as transport, energy & finance.
Web firms will be subject to less stringent obligations, than, say, airports or oil pipeline operators, under the new law.
(Reporting by Julia Fioretti, writing by Foo Yun Chee)