The Impact of the NIS2 Directive and the CER Directive for Medical Device Manufacturers and the Healthcare Sector

Written By

deirdre kilroy Module
Deirdre Kilroy

Partner
Ireland

I am an experienced Irish lawyer. I specialise in complex technology, data and IP transactions, and advise innovative clients on the laws and regulations applicable to related products and services offered in Ireland and other parts of the European Union.

georgina parkinson Module
Georgina Parkinson

Associate
Ireland

I am an associate in Bird & Bird's International Commercial Group, based in the Dublin office where I specialise in Technology, Media, Entertainment and Sports.

The rise in the volume of cyber incidents, the war in Ukraine, and the recent pandemic, has increased focus on the risks for medical device manufacturers and healthcare providers inherent in the data they collect and hold, including the risks posed by the ongoing threat of cyber-attacks. This is where the NIS2 Directive and the CER Directive come in.

In this article we will consider the Network and Information Systems Directive (EU) 2022/0383 (“NIS2”) and the Directive on the Resilience of Critical Entities (EU) 2022/2557 (“CER Directive”) and the impact that they will have on medical device manufacturers and healthcare providers.

Read the full article here

Latest insights

More Insights
featured image

Europe's medicine supply crisis: How the EU's bold new act aims to address supply chain vulnerabilities

3 minutes May 14 2025

Read More
featured image

UK Court of Appeal reaffirms no UK SPC for second medical use

4 minutes May 14 2025

Read More
featured image

The European Commission’s draft for a Critical Medicines Act (CMA): Disruptive Changes in Public Procurement?

4 minutes May 13 2025

Read More