Een lezer vroeg me:
Ik ben CISO bij een middelgroot bedrijf waarbij ICT van groot belang is. Overal lees ik dat bestuurders onder de NIS2-richtlijn persoonlijk aansprakelijk worden voor falende cyberbeveiliging. Ik ben degene die het securitybeleid opstelt en uitvoert — als er iets misgaat, ben ik dan in privé aansprakelijk? Kan een klant of een slachtoffer van een datalek mij persoonlijk een claim sturen?Ik snap de zorg, want het gonst inderdaad van de waarschuwingen over “persoonlijke aansprakelijkheid” onder NIS2. Maar zo snel als dit gaat het zeker niet.
In maart besprak ik de vraag of een slachtoffer van het Odido-datalek de directie persoonlijk kon aanspreken. Sindsdien is de Cyberbeveiligingswet (Cbw) aangenomen als de Nederlandse implementatie van de NIS2-richtlijn. Het wetsvoorstel ligt nu bij de Eerste Kamer en de regering mikt op inwerkingtreding per 1 juli 2026. We zijn er dus bijna.
Artikel 20 lid 1 van de NIS2-richtlijn bepaalt dat de bestuursorganen van essentiële en belangrijke entiteiten de cyberbeveiligingsmaatregelen moeten goedkeuren, toezien op de uitvoering ervan, en “aansprakelijk kunnen worden gesteld” voor inbreuken. Artikel 32 lid 6 gaat nog een stap verder en spreekt over “elke natuurlijke persoon die verantwoordelijk is voor of optreedt als wettelijke vertegenwoordiger” van een essentiële entiteit.
Een CISO heeft ondanks de C in de titel doorgaans geen bestuursfunctie. Zoals het NCSC het omschrijft: de CISO heeft een adviserende, coördinerende en controlerende rol. Je stelt het beleid op, je adviseert de directie, je stuurt de uitvoering aan — maar je bent niet degene die formeel bestuurt in de zin van artikel 2:9 BW.
Dat is essentieel, want de persoonlijke aansprakelijkheid uit de NIS2 is dus wat we in Nederland bestuurdersaansprakelijkheid noemen. Niet een aparte route waarbij iedere gedupeerde een schadeclaim jou in privé mag leggen.
Natuurlijk kun je door je werkgever wel aangesproken worden op nalatigheid bij je werk. En een datalek na handelen conform jouw advies kan daar aanleiding toe geven. Maar dat gaat om zaken als een berisping, demotie of uiteindelijk ontslag en niet om financiële claims.
Arnoud
Het bericht Ben ik als CISO persoonlijk aansprakelijk onder NIS2 voor falend securitybeleid? verscheen eerst op Ius Mentis.
Nurses’ union criticises ‘catastrophic system-wide failure’ in NHS as more under-18s getting stuck in emergency wards
Children and young people in England having a mental health crisis are spending up to three days in an A&E unit before they get a bed in a specialist unit, NHS figures reveal.
One children’s nurse who works in an emergency department said such long waits for under-18s who were in acute distress were “frankly barbaric” but “becoming far more normal”.
Continue reading...What makes this love story fresh is the precise attention to the contemporary environment: the way characters live both in and out of the physical world
The opening section of I Want You to Be Happy is an excellently droll and surefooted description of a man and a woman meeting in a bar, trying to make conversation over the music and flirting vaguely. They establish that she is 23 and that he is 35. All the specifics – the name or location of the bar, the music, even the names of the couple – are for now redacted: “After a while, the twenty-three-year-old woman raised her voice and, referring to the thirty-five-year-old man, asked her short-haired friend: ‘How old do you think he is?’ The short-haired friend surveyed the thirty-five-year-old man’s face; thought for a moment. ‘Forty?’ The twenty-three-year-old woman snort-laughed. ‘He’s thirty-five.’”
Jem Calder, like his protagonists, is bang on trend. His 2022 short story collection, Reward System, was widely admired; this debut novel employs a factual and affectless prose of the sort you’d find in Sally Rooney or Vincenzo Latronico, with a fastidious attention to the surfaces of the world that suggests Nicholson Baker or Bret Easton Ellis or even early Don DeLillo humming in the background. As that opening suggests, these figures are, or could be, representative.
Walking home, she put in her earphones and streamed a new album by her favourite singer-songwriter: the album’s release having been brought to her attention via push notification earlier that day. This new album wasn’t as good as the singer-songwriter’s older ones – or else Joey wasn’t in the right mood for it – so she navigated to the singer-songwriter’s artist page and played the songs she already liked. Listening to these familiar songs, she sang along under her breath, alternately joining in with the lead or backup vocal lines wherever they required least effort.
Continue reading...The online era is pushing screen romantics to alarming extremes. Whether posing as a stranger’s fiancee or framing someone as an obsessive stalker, happy endings look harder than ever to find
It’s a long-running romcom trope that the couples we’re supposed to root for are often hiding lies that threaten the chances of any happy relationship blossoming. From classics such as The Shop Around the Corner to modern blockbusters such as How to Lose a Guy in 10 Days, the genre thrives whenever it presents the audience with the most alarming red flags it conceals from its characters, raising the stakes by seeing if sparks can still fly when an ulterior motive behind each meet-cute is hidden in plain sight.
In the romantic comedies we’ve seen so far this year, this trope has not only been revived but pushed far beyond its breaking point, cementing a new romcom archetype: the unlucky-in-love sociopath. This week’s new release Finding Emily is the starkest example to date, introducing psychology student Emily (Angourie Rice), whose desperation to find a good case study for her dissertation essay on the self-destructive nature of love leads to her concocting a machiavellian scheme to paint university student Owen (Spike Fearn) as an obsessive stalker.
Continue reading...From Hong Kong to Cairo, New York to Kyiv, the world is caught up in confrontations with authoritarian power. Matthew Connors’ new photo book tells the story
Continue reading...Exclusive: Employment tribunal claim says worker lost his job after distributing leaflets throughout London office
Google is facing a legal challenge from an AI engineer who claims he was unfairly dismissed after he protested against its work for the Israeli government, in the latest sign of growing concern about the social and ethical impacts of AI.
The engineer distributed flyers around Google DeepMind’s London offices, which read “Google provides military AI to forces committing genocide” and asking colleagues: “Is your paycheck worth this?” He also emailed colleagues about Google’s 2025 decision to drop a promise not to pursue weapons that harm people and surveillance violating international norms and urged them to unionise.
Continue reading...The Yorkshire Dales Explorer is a little-known alternative to the Settle to Carlisle rail route, and takes you deep into wonderful walking country
Limestone stretches on all sides like an inland ocean – appropriately enough, since the shimmering white rock has its ancient origins in coral, shells and the skeletons of sea creatures. We advance carefully, stepping on clints (blocks of rock) and avoiding grykes (the deep fissures between them). It’s a warm, dry day and, even if it were not, limestone drains better than most types of terrain. For a long while, it’s broad, flat and hallucinatory and then, suddenly, the rocky sea collapses like a waterfall and we’re at the edge of a huge fault. The words Yorkshire Dales might evoke pretty villages and walled-in sheep fields, but this landscape is raw and wild, the kind of natural realm WH Auden celebrated in his poem In Praise of Limestone, and the kind that prompts geological speculation and inward ruminations. To cap it all, there are just three of us and nothing much and no one else all the way to the far horizons.
It’s my first decent yomp of the spring. I’ve come here with two walking pals on the egregiously under-promoted direct train that connects Rochdale and Manchester with the national park and Yorkshire’s Three Peaks. While the Leeds-Settle-Carlisle service – which recently celebrated its 150th birthday – is deservedly famous, the Yorkshire Dales Explorer, which started in June 2024, is much less celebrated. It’s also far less frequent. Trains travel between Leeds and Settle, continuing to Carlisle or Morecambe, 20 times a day Monday to Saturday, 11 times on Sundays. Trains between Manchester Victoria and Settle run on Saturdays only and just once in the morning each way and once in the late afternoon.
Continue reading...Special anniversary edition of award-winning headphones are some of the best sounding you can buy, but cost far more than top Sony noise cancellers
Sony’s latest noise-cancelling headphones are a special anniversary set made to celebrate a decade of its prized 1000X series, designed to be plusher, slimmer, more comfortable and the best sounding yet.
The original 1000X launched in 2016, igniting a fierce rivalry with the dominant Bose and its QuietComfort line, which would push noise-cancelling technology dramatically forward as each tried to outdo the other with subsequent releases.
Continue reading...Diplomatic impasse and lack of progress on the ground has left countries that pledged funds to Board of Peace reluctant to pay
Gaza is in a grim limbo more than seven months after Donald Trump brokered a ceasefire deal: no reconstruction is under way, the so-called Board of Peace is struggling with funding and Palestinian technocrats chosen to run the strip are sidelined in Egypt.
In a 15 May submission to the UN security council, the Board of Peace said the “principal obstacle” to realising Trump’s plan for Gaza was Hamas’s refusal to hand over its weapons and cede control of the strip – but several people familiar with the body said funding shortfalls could jeopardise the effort.
Continue reading...
