Three online workshops will explore the complexities of EU cybersecurity legislation, from NIS2 implementation across Member States to the interaction of European digital regulations and national enforcement practices.
As the European Union continues to strengthen its cybersecurity and digital regulatory framework, organisations face growing challenges in understanding and implementing legal requirements. While EU legislation aims to establish common standards, differences in national implementation, overlapping regulatory obligations, and varying enforcement approaches create additional complexity for organisations operating across borders.
To address these challenges and encourage knowledge exchange among stakeholders, the DETANGLE project is organising a series of three online workshops dedicated to the evolving EU cybersecurity regulatory landscape.
The DETANGLE Workshop Series “Untangling EU Cybersecurity Regulations” will bring together legal, cybersecurity, compliance and policy perspectives to examine how European legislation translates into national requirements and organisational responsibilities.
Led by Valerio Lubello, Research Fellow at Bocconi University and practising lawyer specialising in administrative and technology law, the workshops will offer comparative insights into EU legislation, highlight regulatory challenges and provide opportunities for discussion through interactive Q&A sessions.
Three Workshops, Three Perspectives on EU Cybersecurity Regulations
Workshop 1: The NIS2 Patchwork: A Comparative Perspective Across EU Member States
📅29 October 2026 | 11:00 CET | Online
The NIS2 Directive aims to establish a high common level of cybersecurity across the European Union. However, its transposition into national legislation has resulted in different regulatory approaches, creating challenges for organisations operating in multiple Member States.
This workshop will explore how selected EU countries have implemented NIS2, focusing on differences in national legal frameworks, competent authorities, compliance obligations and enforcement strategies.
Key topics include:
- The state of NIS2 transposition across EU Member States
- Differences in national implementation approaches
- National competent authorities and enforcement mechanisms
- Incident reporting requirements and executive liability
Participants will gain a comparative understanding of the NIS2 implementation landscape and the challenges associated with cross-border compliance.
Workshop 2: The EU Digital Regulatory Mesh: Intersections Between AI Act, GDPR, CRA, and NIS2
📅19 November 2026 | 11:00 CET | Online
EU organisations increasingly need to navigate several interconnected regulatory frameworks. The GDPR, AI Act, Cyber Resilience Act (CRA) and NIS2 Directive each address different aspects of digital governance, security and resilience, but their requirements often intersect.
This workshop will examine how these regulations interact and what their combined requirements mean for organisations developing, deploying or managing digital technologies.
Key topics include:
- Intersections between GDPR, the AI Act, CRA and NIS2
- Overlapping compliance obligations and potential regulatory conflicts
- Incident reporting and data governance requirements
- Cybersecurity, AI governance and organisational accountability
The session will provide a cross-regulatory perspective, helping participants better understand how different EU legal frameworks relate to one another.
Workshop 3: Comparing NIS2 Competent Authorities: Supervisory Models and Enforcement Powers Across EU Member States
📅10 December 2026 | 11:00 CET | Online
Although NIS2 establishes common cybersecurity objectives, national competent authorities play a central role in supervising and enforcing its requirements.
The third workshop will examine the different supervisory models and enforcement powers adopted by national cybersecurity authorities across selected EU Member States.
Key topics include:
- The roles and responsibilities of national competent authorities
- Differences between ex-ante and ex-post supervision
- Cybersecurity inspections, audits and compliance assessments
- Administrative penalties, enforcement powers and management accountability
Participants will gain insights into how national supervisory approaches differ and what these differences mean for organisations subject to NIS2 requirements.
Valerio Lubello – Speaker
Valerio Lubello is a Research Fellow at Bocconi University, where he has been teaching Public and Comparative Public Law since 2014. He earned his Ph.D. in European and Comparative Constitutional Law and was a Postdoctoral Fellow at Bocconi University until 2021. His current research focuses on the intersection of sustainability and technology, with a particular emphasis on Fundamental Rights, Privacy Law, Artificial Intelligence, and Energy Transitions. He is a practicing lawyer in Milan and managing partner at GLA – Administrative and Tech Law.
Who should attend?
The workshops are particularly relevant for:
- Legal and regulatory professionals dealing with EU digital legislation and cross-border compliance
- Cybersecurity professionals, CISOs and risk managers responsible for implementing cybersecurity requirements
- Compliance managers and Data Protection Officers navigating overlapping regulatory obligations
- Public authorities and policymakers involved in cybersecurity governance, supervision and enforcement
- Cybersecurity consultants and auditors supporting organisations in regulatory compliance and risk management
Supporting Knowledge Exchange Through DETANGLE
The workshop series contributes to DETANGLE’s wider mission of addressing the challenges associated with implementing EU cybersecurity legislation. Through knowledge exchange, stakeholder engagement and capacity-building activities, DETANGLE aims to bridge the gap between regulatory requirements and their practical implementation.
Join the DETANGLE Knowledge Exchange Series
Participation is online, and all three workshops will be held in English. Each session will include an expert presentation followed by a Q&A session, allowing participants to raise questions and exchange perspectives.
Whether you are responsible for cybersecurity compliance, advising organisations on EU legislation or following developments in European digital policy, these DETANGLE knowledge exchange series offers an opportunity to deepen your understanding of the regulatory landscape.
Explore the workshops, register for the sessions relevant to your work, and join the discussion.
Stay connected with DETANGLE to discover upcoming events, project developments and resources.