New EU legislation aimed at deflecting cyber threats is going to require changes that domain industry companies in Europe and beyond will have to deal with.