The Dutch Senate passed the Cyber Security Act, replacing existing network security legislation with tougher governance and incident-reporting requirements for critical sectors from August 15, with penalties of up to ten million euros or two percent of global turnover for serious violations.