EU Council moves to exclude software-as-a-service from new cybersecurity law
Summary
Some EU countries have also called for including Software-as-a-Service, which gathers online services like Netflix and Google Workspace hosted on the providers’ cloud infrastructure. In particular, the draft law has been rephrased to only apply to remote data processing solutions based on software or hardware that support the functioning of a connected device. The push for keeping SaaS outside the new cybersecurity rules is consistent with what Internal Market Commissioner Thierry Breton said at the Telecom Council meeting on Tuesday (6 December). And also, further discussions may be needed on to what extent the services should and could be included,” said Alexandra van Huffelen, the Dutch state secretary for digitalisation, at the ministerial meeting. A new paragraph has been added mandating that member states should not put in place obstacles that prevent connected products from being launched and circulating in the EU single market.