EU cybersecurity regulatory tsunami creates both compliance burdens and market opportunities
Executive summary: Experts debated the impact of the EU’s cybersecurity regulatory tsunami, covering NIS2, CER, DORA and CRA, at an Expansión roundtable moderated by Julia Gil. The directives impose new compliance costs and fines, but simultaneously open a growing market for cybersecurity products and services across the EU.
Who is involved: Moderator Julia Gil (Expansión Jurídico), cybersecurity experts, regulators and corporate representatives.
Likely next: Companies will accelerate spending on compliance tools and advisory services; regulators may issue further guidance and enforcement timelines.
A roundtable hosted by Expansión examined how the wave of EU directives—NIS2, CER, DORA and CRA—is reshaping cybersecurity obligations for businesses. Experts noted that while the rules raise the cost of non‑compliance, they also spur demand for security services, technology and consulting, especially for firms operating in essential and financial sectors.
Timeline
- — La IA provoca un cambio de escala del cibercrimen (Expansión)
- — Cómo generar oportunidades a partir del 'tsunami regulatorio' (Expansión)
- — Soberanía tecnológica europea, también para la ciberseguridad (Expansión)
Analysis — what this means
Sectors affected
- cybersecurity services
- EU critical infrastructure operators
- financial services subject to DORA
Regulatory implications
- EU cybersecurity directives NIS2, CER, DORA and CRA expand compliance scope and raise potential fines
Historical parallels
- GDPR implementation in 2018 introduced broad data‑protection obligations similar in scope to the new cybersecurity rules
Sources
- Cómo generar oportunidades a partir del 'tsunami regulatorio' — Expansión
- La IA provoca un cambio de escala del cibercrimen — Expansión
- Soberanía tecnológica europea, también para la ciberseguridad — Expansión
Related cases
- Spain's video game market generated €2.29 billion in 2025, marking over 30% growth in five years and underscoring the sector's expanding role in the country's digital entertainment economy
- Expansión opinion piece flags broader symptoms of Spain's housing crisis, linking affordability, construction costs and macro‑financial risks
- Effective one‑on‑one meetings drive employee performance by being frequent, brief and action‑oriented
- European banks boost synthetic risk transfer volumes to €378 bn in 2025, up 170% in four years
- Expansión warns that declining civil society and rising polarization threaten social cohesion and, by extension, the stability of the business environment
- Employee absences surge after summer, with over a third of yearly sick leave taken upon return and nearly half occurring on Monday‑Tuesday