IT security in Europe is not based on a single law. Rather, it is a network of several important legal and regulatory requirements that must be observed. The basic rule is that EU regulations are directly applicable in all member states, while EU directives must be implemented through national laws. We take a detailed look at the most important ones.