We are looking back at 5 years with the GDPR, and we want to discuss how GDPR has affected business performance in Europe. With the new NIS 2 legislation coming up soon, we will try to draw parallels and investigate if we can use our experience with GDPR when we implement NIS 2. Will companies face some the same challenges with NIS2 as they did with GDPR? What is the optimal course of actions in the journey to getting ready for NIS 2?