logo czasopisma

Articles

2026: online-first

The European Union and Digital Sovereignty: NIS 2 Directive, a Strategic Asset or Handicap in Geopolitical Cyberspace Competition?

DOI:
https://doi.org/10.36128/vk3bep89
Submitted
30 September 2026
Published
19 October 2026

Abstract

The global interconnection of cyberspace poses unprecedented challenges to the digital sovereignty of states and the extraterritorial application of their laws. This publication examines comparative legal frameworks and emerging cybersecurity norms, drawing on analyses from contemporary legal literature, particularly those addressing the impact of the German Law Journal on extraterritorial jurisdiction. We will specifically analyze the requirements of the European Union's NIS 2 Directive and the complexities of its implementation. The central question is to what extent this directive, while seeking to strengthen the cyber resilience of member states, could unintentionally constrain EU countries more than other major cyber powers, such as China and the United States.

            The discussion will highlight the cyber risks inherent in this extraterritoriality of law, as identified by platforms like LawEdge, and examine the extraterritorial obligations of states in cybersecurity, as documented by initiatives such as EuRepoC. This article explores how, while necessary, the directive could paradoxically create competitive disadvantages for the EU. This study aims to provide an in-depth understanding of the tensions between national security imperatives, data protection, and the need for international cooperation in a borderless cyberspace, while emphasizing the practical implications for legal actors and businesses within the European Union and beyond.

References

  1. Bierecki Dominik, Czuryk Małgorzata, Gaie Christophe, Langlois-Berthelot Jean, “Sovereignty by Design: Embedding Fiscal Risk Intelligence in Europe’s” Prawo i Więź, No. 1 (2026): 147-164, https://doi.org/10.36128/2z2k7566.
  2. Bierecki Dominik, Gaie Christophe, Karpiuk Mirosław, “Artificial Intelligence in e-Administration” Prawo i Więź, No. 1 (2025): 383-407, https://doi.org/10.36128/PRIW.VI54.1201.
  3. Boudy, Pierre-Alexandre, Hadji-Janev Metodi, Karpiuk Mirosław, „The Military Dimension of Cybersecurity” Studia Iuridica Lublinensia, No. 1 (2026): 41-61, https://doi.org/10.17951/sil.2026.35.1.41-61.
  4. Cochrane Tim, „Hiding in the Eye of the Storm Cloud: How CLOUD Act Agreements Expand U.S. Extraterritorial Investigatory Powers” Duke Journal of Comparative & International Law, No. 1 (2021): 153-210.
  5. Couture Stéphane, Toupin Sophie, „What Does the Concept of 'Sovereignty' Mean in Digital, Network and Technological Sovereignty?”, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3107272, [accessed: 16.08.2025].
  6. Czuryk Małgorzata, “Cybersecurity and Protection of Critical Infrastructure” Studia Iuridica Lublinensia No. 5 (2023): 43-52, https://doi.org/10.17951/sil.2023.32.5.43-52.
  7. Czuryk Małgorzata, “Restrictions on the Exercising of Human and Civil Rights and Freedoms Due to Cybersecurity Issues” Studia Iuridica Lublinensia, No. 3, (2022): 31-43, https://doi.org/10.17951/sil.2022.31.3.31-43.
  8. Czuryk Małgorzata, “Zarządzanie kryzysowe w obszarze cyberbezpieczeństwa” Ius et Securitas, No. 1 (2025): 5-12.
  9. Czuryk Małgorzata, „Jurisdiction of the Voivode in the Field of Crisis Management” Studia Iuridica Lublinensia, No. 2 (2025): 87-98, https://doi.org/10.17951/sil.2025.34.2.87-98.
  10. Gaie Christophe, Karpiuk Mirosław, Strizzolo Nicola, “Cybersecurity of Public Sector Institutions” Prawo i Więź, No. 6 (2024): 347-362, https://doi.org/10.36128/PRIW.VI53.1129.
  11. Gaie Christophe, Mueck Markus, „Introduction to the Networks and Information Systems 2 (NIS2) Directive”, [in:] European Digital Regulations, eds. Markus Mueck, Christophe Gaie (Cham: Springer, 2025): 161-180.
  12. Ijaz Sabir, „Cybersecurity and Sovereignty: The Conflict among States in Governing Cyberspace” Pakistan Social Sciences Review, No. 4 (2024): 706-714.
  13. Jara Antonio, Martinez Iris Cuevas, Sanchez Jaime, „CyberSecurity Resilience Act (CRA) in Practice for IoT Devices: Getting Ready for the NIS2”, https://www.researchgate.net/publication/380971234_CyberSecurity_Resilience_Act_CRA_in_practice_for_IoT_devices_Getting_ready_for_the_NIS2#fullTextFileContent, [accessed: 22.08.2025].
  14. Kaczmarek Krzysztof, “Bezpieczeństwo państwa wobec współczesnych zagrożeń” Prawo i Więź, No. 5 (2025): 567-580, https://doi.org/10.36128/PRIW.VI58.1382.
  15. Kamminga Menno, „Extraterritoriality”, https://opil.ouplaw.com/display/10.1093/law:epil/9780199231690/law-9780199231690-e1040, [accessed: 16.08.2025].
  16. Karpiuk Mirosław, Melchior Claudio, Soler Urszula, “Cybersecurity Management in the Public Service Sector” Prawo i Więź, No. 4 (2023): 7-27, https://doi.org/10.36128/PRIW.VI47.751.
  17. Katagiri Nori, „Why international law and norms do little in preventing non-state cyber attacks” Journal of Cybersecurity, No. 1 (2021): 1-9.
  18. Krauze-Maślankowska Patrycja, Majewicz Dorota, “Cybersecurity in the Development of Smart Cities: A Big Data Analysis of Digital Security Management Practices by Local Public Administration in Poland” Ius et Securitas, No. 2 (2025): 55-66.
  19. Kuner Christopher, Transborder Data Flows and Data Privacy Law, Oxford: University Press, 2013.
  20. Malcomson Scott, „Splinternet: How Geopolitics and Commerce Are Fragmenting the World Wide
  21. Palladino Nicola, „The ambiguity of Digital Sovereignty between territorialization of the cyberspace”, extraterritorial claims and digital rights: Analysing data transfer policies in EU, US and China, https://www.giga-net.org/wp-content/uploads/2023/10/GIGANET-2023-Palladino_The-Ambiguity-of-Digital-Sovereignty.pdf, [accessed: 17.08.2025].
  22. Ruohonen Jukka, „A Systematic Literature Review on the NIS2 Directive”, https://arxiv.org/abs/2412.08084, [accessed: 23.08.2025].
  23. Ryngaert Cedric, „Extraterritorial Enforcement Jurisdiction in Cyberspace: Normative Shifts” German Law Journal, No. 4 (2023): 537-550.
  24. Web” International Journal of Communication, No.13 (2019): 642-645
  25. Wojciechowski Tomasz, “Cyberbezpieczeństwo i dezinformacja we współczesnym świecie: strategie ochrony i zarządzania kryzysowego” Ius et Securitas, No. 1 (2024): 87-90.
  26. Woods Andrew Keane, „Litigating Data Sovereignty”, https://www.yalelawjournal.org/pdf/Woods_i233nhrp.pdf, [accessed: 22.08.2025].

Downloads

Download data is not yet available.

Most read articles by the same author(s)

<< < 1 2