Digital Service Providers (EU Exit) Consultation

Following the UK’s departure from the EU, the UK proposes to introduce a requirement in the NIS Regulations for specified non-UK based Digital Service Providers (DSPs) operating in the UK to designate a representative in this country that will be subject to the regulatory authority of the ICO.

The NIS Regulations define DSPs as organisations that provide online marketplace services, online search engine services, and/or cloud computing services. DSPs are in scope of the NIS Regulations if they have 50 or more staff, or a turnover of more than €10m per year.

Under the NIS Directive, a DSP that is not established in the EU but offers digital services within the EU, must designate a representative in a Member State in which it operates, to be regulated by the relevant Competent Authority in that country.

When the UK leaves the EU it will become a third country under the NIS Directive. Therefore, UK established DSPs wishing to operate in the EU will be required to designate a representative in a Member State. They must comply with the regulations in that Member State and will be regulated by its relevant Competent Authority.

There is currently no requirement set out in the UK’s NIS Regulations for DSPs not headquartered in the UK to designate a representative here. This means that the ICO (as the relevant Competent Authority) would be unable to exercise the enforcement powers provided for in the NIS Regulations with regard to non-UK based DSPs operating here.

Proposed approach

The Government is therefore proposing to introduce a requirement in the NIS Regulations, following the UK’s departure from the EU, for non-UK established DSPs operating in the UK, whose size and activities would render them in scope of the NIS Regulations, to designate a representative in this country.

The representative would be required to comply with the NIS Regulations in the UK, and would be regulated by the ICO.

In line with existing requirements for UK based DSPs coming into scope of the NIS Regulations, in scope non-UK based DSPs would be allowed three months in which to provide contact details of the designated representative and register with the ICO.

Call for views

The Government is seeking views on the proposed introduction of this requirement when the UK exits the EU.

DCMS would welcome views and any supporting evidence on the costs and benefits of this proposal, as well as any views on the proposed three month timeframe to designate a representative and register with the ICO.

The consultation document can be read here

Ways to respond

Email to:

nis@culture.gov.uk

Write to:

NIS Directive Team 
Department for Digital, Culture, Media & Sport 
4th Floor 
100 Parliament Street 
London 
SW1A 2BQ

Please respond by 11.45pm on Tuesday 11 June.

  • Talal Rajab

    Talal Rajab

    HEAD OF PROGRAMME | CYBER AND NATIONAL SECURITY
    T 020 7331 2189

Share this

FROM SOCIAL MEDIA

Guest blog by Jay Chinnadorai @informetis and Chair of the Connected Home Working Group provides an overview of wha… https://t.co/75UEtsJIop
#ConnectedHome19 LAUNCH TOMORROW 🥳 Industry 🚦 Knowledge 🔝 Ownership 🧐 Control ☎️ Confidence💗 Cost📈 Panel… https://t.co/wGOCTNXt00
On Sunday, @techUK celebrated International Women in Engineering Day where we looked at how to #TransformTheFuture.… https://t.co/LVB0wUmk9E
In this blog our Craig Melson @techUK flicks through tonight’s TV guide on how connectivity changed our entertainme… https://t.co/rKd5zHMExN
Guest blog by Sean Gulliford @Gemserv highlights what is likely to be coming to a connected home near you in the ve… https://t.co/bqP0SbOle8
Following the recent release of techUK’s report, Collaboration for Public Safety Outcomes, this podcast explores th… https://t.co/ctKK9sa4rZ
Become a Member
×

Become a techUK Member

By becoming a techUK member we will help you grow through:

Click here to learn more...