RESEARCH AND COMPARISON OF EUROPEAN UNION REGULATORY DOCUMENTS IN CYBERSECURITY

Abstract

The article presents a thorough study and comparison of the main regulatory acts of the European Union in the field of cybersecurity, including: NIS2 Directive, General Data Protection Regulation (GDPR), Digital Operational Resilience Regulation (DORA) and PCI DSS standard. These documents are considered fundamental elements in shaping the EU's current policy on digital information protection, covering personal data, financial information and critical infrastructure. The paper outlines the key objectives of each of the acts, analyses their scope of application, requirements for regulated entities, risk management mechanisms, incident reporting, interaction with suppliers, and sanction provisions. Particular attention is paid to comparing the acts in terms of their impact on business and IT infrastructure, as well as identifying the interrelationships between them. It has been established that although each document has its own focus - personal data protection, financial infrastructure resilience, digital network security, or payment card transaction protection - they are all aimed at creating a comprehensive cyber security ecosystem within the EU. The article also analyses international analogues of these acts, such as GDPR-like laws in the United States and Brazil, NIST and ISO standards, which demonstrates the global nature of the digital security problem and the search for common approaches to solving it. In conclusion, the paper emphasises the importance of a comprehensive and harmonised approach to cybersecurity as a key condition for the sustainable development of a digital society. Given the current threats, in particular geopolitical conflicts and the growing scale of cybercrime, the effective implementation of European standards is of particular importance for partner countries, in particular Ukraine, which needs to adapt the relevant standards to enhance national cyber resilience.