<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head><body text="#485663" bgcolor="#FFFFFF">Hi Chris,<br>
<br>
unfortunately, "Identification criteria" is the only guideline bullet
point on that web page which is missing a hyperlink, and google throws
up nothing interesting on the ENISA web site. It seems that information
on this is in short supply <span class="moz-smiley-s2" title=":-("></span><br>
<br>
Nick<span></span>
<blockquote type="cite"
cite="mid:625FC8F3-34DD-49E1-8633-D1DE20B10931@ripe.net" style="border:
0px none ! important;">
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;">
<div style="width:100%;border-top:2px solid
#EDF1F4;padding-top:10px;">
<div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;"><a
style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:chrisb@ripe.net" moz-do-not-send="true">Chris
Buckridge</a></div>
<div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">6
November 2018 at 13:13</span></font></div> </div>
</div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;"><div><br><br></div><div>Hi
Nick,<br><br>From our conversation with the Dutch competent authority
it wasn’t clear, but we aren’t aware of any specific Dutch requirements.<br><br>Earlier
on, however, ENISA published a number of guidelines and requirements
that member states can use in evaluating operators and services against
the NIS Directive requirements - these are published here:<br><a class="moz-txt-link-freetext" href="https://www.enisa.europa.eu/topics/critical-information-infrastructures-and-services/cii/nis-directive">https://www.enisa.europa.eu/topics/critical-information-infrastructures-and-services/cii/nis-directive</a><br><br>Also,
there was a presentation by the Dutch National Cyber Security Centre
during RIPE 74, in which they explained a bit more about the purpose and
objectives of the directive and their views of what would be considered
essential services. A recording and the slides are available from
<a class="moz-txt-link-freetext" href="https://ripe74.ripe.net/archives/video/135/">https://ripe74.ripe.net/archives/video/135/</a><br><br>Cheers<br>Chris<br><br><br></div>
</div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;"><div
style="width:100%;border-top:2px solid #EDF1F4;padding-top:10px;"> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;">
<a style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:chrisb@ripe.net" moz-do-not-send="true">Chris
Buckridge</a></div> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">6
November 2018 at 04:45</span></font></div> </div></div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;"><pre wrap="">Hi Matt, all,
Jumping into the discussion here, but I can hopefully shed some light in response to your questions:
</pre><blockquote type="cite"><pre wrap="">On 5 Nov 2018, at 20:55, Mat Ford <a class="moz-txt-link-rfc2396E" href="mailto:ford@isoc.org"><ford@isoc.org></a> wrote:
Thanks Mirjam. I posted a comment on the website, but I guess it might make more sense to share my reaction here:
Is the RIPE NCC response to the Dutch regulator regarding the definition of an essential service operator public?
</pre></blockquote><pre wrap="">At this point, the communication with the Dutch regulator has been of an informal nature. We plan to communicate more explicitly to the community when the official decision regarding Dutch essential services is made public. However, the key points in our communication have centred around the fact that a single root server operator, due to the distributed nature of the DNS, should not be considered an Operator of Essential Services under the NIS Directive.
</pre><blockquote type="cite"><pre wrap="">Also, you say, "Data collection restrictions that could hinder the development of AI and the IoT." I think a lot of European citizens would prefer that the development of AI and IoT not be at the expense of their personal data becoming a private economic resource. Why does the RIPE NCC believe that, "the new ePrivacy text ... takes a restrictive approach to metadata and content data processing, to the point that the current provisions would have a negative impact on the development of things like AI, IoT and big data business.”
</pre></blockquote><pre wrap="">To be clear, the RIPE NCC does not take a position on whether such regulations are good or bad - our goal is to raise awareness with our community and membership of measures that could affect their operations. We believe (based on our discussions with our contacts and consulting agency in Brussels) that the current proposals would have an impact on development in these spaces, but as you note, this may well be in line with the broader preferences of the community. The key point for us is that our community (members of which are involved in the development of IoT and big data applications) be aware of this potential impact.
Cheers
Chris
——
Chris Buckridge
External Relations Manager
RIPE NCC
</pre><blockquote type="cite"><pre wrap="">Regards,
Mat
</pre><blockquote type="cite"><pre wrap="">On 5 Nov 2018, at 22:56, Mirjam Kuehne <a class="moz-txt-link-rfc2396E" href="mailto:mir@ripe.net"><mir@ripe.net></a> wrote:
Dear colleagues,
In recent years, there’s been a trend towards increased EU regulation
with the potential to impact more actors across the Internet landscape.
Here, we give a brief overview of the most pertinent policies currently
being proposed, debated and implemented in the European Union:
<a class="moz-txt-link-freetext" href="https://labs.ripe.net/Members/suzanne_taylor_muzzin/how-eu-regulation-affects-you">https://labs.ripe.net/Members/suzanne_taylor_muzzin/how-eu-regulation-affects-you</a>
Kind regards,
Mirjam Kühne
RIPE NCC
</pre></blockquote></blockquote>
</div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;"><div
style="width:100%;border-top:2px solid #EDF1F4;padding-top:10px;"> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;">
<a style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:ford@isoc.org" moz-do-not-send="true">Mat Ford</a></div>
<div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">5
November 2018 at 16:55</span></font></div> </div></div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;"><div>Thanks
Mirjam. I posted a comment on the website, but I guess it might make
more sense to share my reaction here:<br><br>Is the RIPE NCC response to
the Dutch regulator regarding the definition of an essential service
operator public?<br><br>Also, you say, "Data collection restrictions
that could hinder the development of AI and the IoT." I think a lot of
European citizens would prefer that the development of AI and IoT not be
at the expense of their personal data becoming a private economic
resource. Why does the RIPE NCC believe that, "the new ePrivacy text ...
takes a restrictive approach to metadata and content data processing,
to the point that the current provisions would have a negative impact on
the development of things like AI, IoT and big data business.”<br><br>Regards,<br>Mat<br><br></div><div><br><br></div>
</div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;"><div
style="width:100%;border-top:2px solid #EDF1F4;padding-top:10px;"> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;">
<a style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:mir@ripe.net" moz-do-not-send="true">Mirjam
Kuehne</a></div> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">5
November 2018 at 15:56</span></font></div> </div></div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;"><div>Dear
colleagues,<br><br>In recent years, there’s been a trend towards
increased EU regulation<br>with the potential to impact more actors
across the Internet landscape.<br>Here, we give a brief overview of the
most pertinent policies currently<br>being proposed, debated and
implemented in the European Union:<br><br><a class="moz-txt-link-freetext" href="https://labs.ripe.net/Members/suzanne_taylor_muzzin/how-eu-regulation-affects-you">https://labs.ripe.net/Members/suzanne_taylor_muzzin/how-eu-regulation-affects-you</a><br><br>Kind
regards,<br>Mirjam Kühne<br>RIPE NCC<br><br></div>
<hr class="__pbConvHr" style="border: none 0; border-top: 1px dotted
#B5B5B5; height: 1px;margin:15px 0 0 0"> </div>
</blockquote>
<br>
</body></html>