(This note is not part of the Regulations)

These Regulations are made in exercise of the powers conferred by section 8(1) of the European Union (Withdrawal) Act 2018 (c. 16) ("the Act") in order to address failures of retained EU law to operate effectively and other deficiencies (in particular under paragraphs (a), (b), (c) and (d) of section 8(2)) which apply to this instrument arising from the withdrawal of the UK from the EU.

These Regulations make amendments in the field of cyber security. Part 1 amends the Network and Information Systems Regulations 2018 (S.I. 2018/506) ("the NIS Regulations"), which implement Directive (EU) 2016/1148 of the European Parliament and of the Council concerning measures for a high common level of security of network and information systems across the EU ("the NIS Directive"). Part 1 also revokes Regulation (EU) 2019/881 of the European Parliament and of the Council of 17th April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (OJ L 151, 7.6.2019, p. 15) ("the ENISA Regulation").