Are you a DSP? Uncertainty over scope of NIS Directive

New security and breach notification laws for online market places, online search engines and certain cloud computing service providers (‘Digital Service Providers’ or ‘DSPs’) have applied in the UK since May this year, but there is still some uncertainty as to who exactly is in scope. In this briefing, we look at how the Government has tried to clarify which DSPs are in scope through its latest consultation response, and what being an in-scope DSP (or an organisation that obtains services from an in-scope DSP) means in practice.