Two years after the European Commission set out its Cybersecurity Strategy, the data security and privacy landscape in the European Union is being reshaped. In this guest article, Eduardo Ustaran and Nick Westbrook, respectively a partner and associate in the London office of Hogan Lovells, explain why four new developments – the NIS Directive, the GDPR, PSD2 and the eID Regs – merit particular attention for companies. See also “The E.U.’s New Rules: Latham & Watkins Partner Gail Crawford Discusses the Network Information Security Directive and the General Data Protection Regulation” (Jan. 20, 2016).