The Legal Status of Digital Service Providers in the Sphere of Cybersecurity

Abstract

The article addresses the issue regarding the obligations of digital service providers performed in the area of cybersecurity. Because of their status as entities within the national cybersecurity system, they must respond to disruptions occurring in cyberspace. The measures taken by digital service providers to ensure the security of the information systems used to provide the digital service must lead to the minimisation of the risk of incidents i.e. phenomena that have or may have an adverse impact on cybersecurity. Economic and social development depends to a large extent on smoothly operating communication and information systems that ensure the provision of various types of services, including digital services. Disruptions in the functioning of these systems affect not only the stability of economic circulation but also the effectiveness of public institutions in performing their tasks. Given the above, the information obligations imposed on digital service providers regarding the requirement to report incidents or those related to taking measures to prevent or minimise their impact on a digital service are of major importance.