A evolução normativa da segurança cibernética na União Europeia : (2013–2024)

Abstract

Cyberspace has intensified concerns among states and organizations regarding sovereignty, data protection, and Artificial Intelligence. Consequently, numerous debates have emerged around cybersecurity, particularly concerning regulatory developments in this field. This study, therefore, analyzes cybersecurity in Europe from the perspective of the European Union, focusing on the normative framework adopted to protect its institutions and Member States. To this end, it examines the EU’s key regulatory milestones, such as the establishment of the European Union Agency for Cybersecurity (ENISA), the Directive on Security of Network and Information Systems (NIS), and the Cybersecurity Act, and assesses their roles in strengthening European cyber resilience. Moreover, the research explores the influence of the cyberattacks against Estonia in 2007 and Georgia in 2008 on the formulation of the EU’s digital defense policies. It also investigates whether and how cybersecurity has taken on securitized characteristics throughout the development of the EU’s regulatory framework. Finally, the study addresses the role and impact of the regulatory process for Artificial Intelligence within the European Union. To achieve these objectives, the research draws upon an analysis of official EU documents, complemented by specialized literature on cybersecurity in Europe and the European Union, as well as the theory of securitization.