Skip to content
Legislations.
European UnionEuropean UnionLawLawDirective (EU) 2022/2555

NIS2 Directive

Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

Commission refers Ireland, Spain, France and the Netherlands to the Court of Justice for failing to transpose NIS2Jul 82 months ago

Body
European Parliament and Council
Session
9th parliamentary term
Introduced
Dec 16, 2020
In effect since
Jan 16, 20233 years ago
Cyber
Official page Source: EUR-Lex; European Parliament Legislative Observatory; European Commission

Timeline

  1. Jul 8 2 months ago

    Commission refers Ireland, Spain, France and the Netherlands to the Court of Justice for failing to transpose NIS2

  2. Jan 20 8 months ago

    Commission proposes targeted NIS2 amendments COM(2026) 13 on jurisdiction, ransomware reporting and cross-border supervision

  3. Nov 19, 2025 10 months ago

    Digital Omnibus proposal COM(2025) 837 proposes a single entry point for incident reporting

  4. May 7, 2025 1 year ago

    Commission sends reasoned opinions to member states that had not notified transposition

  5. Nov 28, 2024 1 year ago

    Commission sends letters of formal notice to member states that had not notified transposition

  6. Oct 17, 2024 1 year ago

    Transposition deadline for member states; Commission adopts Implementing Regulation (EU) 2024/2690 on technical and methodological requirements

  7. Jan 16, 2023 3 years ago

    Enters into force

  8. Dec 27, 2022 3 years ago

    Published in the Official Journal

  9. Dec 14, 2022 3 years ago

    Final act signed

  10. Nov 28, 2022 3 years ago

    Council adopts the act

  11. Nov 10, 2022 3 years ago

    Parliament adopts its first reading position

  12. Jul 13, 2022 4 years ago

    ITRE committee approves the text agreed in trilogue

  13. Oct 28, 2021 4 years ago

    ITRE committee vote and decision to open negotiations

  14. Dec 16, 2020 5 years ago

    Commission proposal COM(2020) 823 published, procedure 2020/0359(COD)