European UnionEuropean UnionLawCommission Implementing Regulation (EU) 2024/2690
NIS2 Implementing Regulation on technical requirements and significant incidents
Sets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.
Enters into force, repealing Implementing Regulation (EU) 2018/151Nov 7, 2024 2 years ago
- Body
- European Commission
- Introduced
- Oct 17, 2024
- In effect since
- Nov 7, 20242 years ago
- Topics
- CyberData centers
Timeline
Nov 7, 2024 2 years ago
Enters into force, repealing Implementing Regulation (EU) 2018/151
Oct 17, 2024 2 years ago
Commission adopts the implementing regulation under Articles 21(5) and 23(11) of NIS2
Related
Digital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
Cybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
Cloud and AI Development Act
Proposed regulation to speed up permitting and deployment of data centres, aim to at least triple EU data centre capacity, and create an EU-wide four-level cloud and AI sovereignty framework with a public sector procurement mechanism.
Cyber Resilience Act
Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
EuroHPC AI Gigafactories amendment
Amends the EuroHPC Joint Undertaking regulation to provide a legal basis for AI Gigafactories of more than 100,000 advanced AI processors and to expand quantum computing activities.
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
NIS2 Directive
Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.
Action Plan on Cybersecurity and Artificial Intelligence
Commission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.