NIS2 in Poland: personal liability for board members and 24 hours to report incidents

An amendment to the law on the national cybersecurity system, implementing the EU NIS2 directive, will introduce personal liability of board members for violations. Companies will have 24 hours to report serious security incidents. The new rules are stirring strong emotions among entrepreneurs running out of time to prepare.