Recital 28 Limitations and exemptions with regards to future legislation

This Regulation lays down horizontal cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; rules which are not specific to sectors or to certain products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;. Nevertheless, sectoral or product-specific Union rules could be introduced, laying down requirements that address all or some of the risks means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; covered by the essential cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements set out in this Regulation. In such cases, the application of this Regulation to products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; covered by other Union rules laying down requirements that address all or some of the risks means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; covered by the essential cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements set out in this Regulation may be limited or excluded where such limitation or exclusion is consistent with the overall regulatory framework applying to those products and where the sectoral rules achieve at least the same level of protection as the one provided for by this Regulation. The Commission should be empowered to adopt delegated acts to supplement this Regulation by identifying such products and rules. For existing Union law where such limitation or exclusion should apply, this Regulation contains specific provisions to clarify its relation with that Union law.