Skip to main content
PolicySpeak
← All legislative files
Directive (EU) 2022/25552020/0359(COD)COM(2020)823

A high common level of cybersecurity

Measures for a high common level of cybersecurity across the Union, repealing Directive (EU) 2016/1148

Stage
In force, reached 27 Dec 2022
In force
In force since 16 Jan 2023 · CELEX 32022L2555
Transposition deadline
17 Oct 2024
Procedure
Ordinary legislative procedure
Rapporteur
Bart Groothuis (Renew)
Lead DG
DG CNECT
Commissioner
Thierry Breton
Last activity
27 Dec 2022
33 entries · record as of 14 Sept 2026

Where it stands

Latest: Published in the Official Journal, 27 Dec 2022.

Show the earlier record: 21 dates, 13 Aug 2020 to 10 Nov 2022
  1. 13 Aug 2020
    • Inception impact assessment closed: Revision of the NIS Directive, 42 responses · Commission
  2. 2 Oct 2020
    • Public consultation closed: Revision of the NIS Directive, 210 responses · Commission
  3. 16 Dec 2020
    • Adoption by Commission
  4. 17 Dec 2020
    • Discussions within the Council or its preparatory bodies
  5. 18 Dec 2020
    • Discussions within the Council or its preparatory bodies
  6. 11 Jan 2021
    • Discussions within the Council or its preparatory bodies
  7. 21 Jan 2021
    • Plenary sitting
    • Referred to committee
  8. 1 Feb 2021
    • Discussions within the Council or its preparatory bodies
  9. 19 Mar 2021
    • Discussions within the Council or its preparatory bodies
  10. 21 Mar 2021
    • Feedback on adopted proposal closed: Revision of the NIS Directive, 121 responses · Commission
  11. 22 Mar 2021
    • Discussions within the Council or its preparatory bodies
  12. 25 Mar 2021
    • Discussions within the Council or its preparatory bodies
  13. 5 May 2021
    • Discussions within the Council or its preparatory bodies
  14. 20 May 2021
    • Plenary sitting
  15. 28 Jun 2021
    • Discussions within the Council or its preparatory bodies
  16. 10 Nov 2021
    • Plenary sitting
  17. 22 Nov 2021
    • Plenary endorsed the trilogue mandate
  18. 26 Nov 2021
    • Discussions within the Council or its preparatory bodies
  19. 11 Jan 2022
    • Discussions within the Council or its preparatory bodies
  20. 20 Apr 2022
    • Discussions within the Council or its preparatory bodies
  21. 10 Nov 2022
    • EP position at first reading
    • Plenary amended the proposal
    • Plenary vote
    • Debate in plenary
  1. 11 Nov 2022
    • Discussions within the Council or its preparatory bodies
  2. 17 Nov 2022
    • Discussions within the Council or its preparatory bodies
  3. 18 Nov 2022
    • Discussions within the Council or its preparatory bodies
  4. 22 Nov 2022
    • Discussions within the Council or its preparatory bodies
  5. 28 Nov 2022
    • Approval of the EP's first reading position by the Council (adoption of the legislative act)
  6. 12 Dec 2022
    • Plenary sitting
  7. 14 Dec 2022
    • Signed
  8. 27 Dec 2022
    • Published in the Official Journal
11 people

Who is on it

The Parliament's rapporteurs, shadow rapporteurs and opinion rapporteurs currently on this file.

RoleNameGroupCountryCommittee
RapporteurBart GroothuisRenewNLITRE
Shadow rapporteurEva KailiS&DELITRE
Shadow rapporteurEva MaydellEPPBGITRE
Shadow rapporteurEvžen TošenovskýECRCZITRE
Shadow rapporteurMarisa MatiasThe LeftPTITRE
Shadow rapporteurRasmus AndresenGreens/EFADEITRE
Shadow rapporteurThierry MarianiPfEFRITRE
Rapporteur for opinionMarkéta GregorováGreens/EFACZAFET
Rapporteur for opinionMorten LøkkegaardRenewDKIMCO
Rapporteur for opinionLukas MandlEPPATLIBE
Rapporteur for opinionJakop G. DalundeGreens/EFASETRAN
281 amendments

Amendments

Tabled on 7 Nov 2022. The texts are in the amendment documents below.

By article

  • Annex I – point 2 – point d – indent 2 (new)1
  • Annex II – table – row 6 a (new)1
  • Article 1 – paragraph 2 – point c a (new)1
  • Article 10 – paragraph 1 a (new)1
  • Article 10 – paragraph 1 – point c1
  • Article 10 – paragraph 1 – point c a (new)1
  • Article 10 – paragraph 1 – point d1
  • Article 10 – paragraph 1 – point e1
  • Article 10 – paragraph 2 – point a1
  • Article 10 – paragraph 2 – point b1
Show 20 more provisions
  • Article 10 – paragraph 2 – point c1
  • Article 10 – paragraph 2 – point e1
  • Article 10 – paragraph 2 – point f a (new)1
  • Article 10 – paragraph 2 – point f b (new)1
  • Article 10 – paragraph 4 – introductory part1
  • Article 10 – title1
  • Article 11 – paragraph 21
  • Article 11 – paragraph 41
  • Article 11 – paragraph 51
  • Article 12 – paragraph 3 – subparagraph 11
  • Article 12 – paragraph 3 – subparagraph 21
  • Article 12 – paragraph 4 – point b1
  • Article 12 – paragraph 4 – point b a (new)1
  • Article 12 – paragraph 4 – point c1
  • Article 12 – paragraph 4 – point f1
  • Article 12 – paragraph 4 – point f a (new)1
  • Article 12 – paragraph 4 – point k a (new)1
  • Article 12 – paragraph 4 – point k b (new)1
  • Article 12 – paragraph 81
  • Article 13 – paragraph 3 – point a a (new)1

Covers 30 of the 281 amendments.

1 act

Delegated and implementing acts beneath it

By status: 1 published.

ActKindStatusAdoption
Commission Implementing Regulation (EU) 2024/2690Implementing · RegulationPublished16/09/2024

Titles link to EUR-Lex where the act has been published.

1 consultation

Consultations on it

The Commission's Have Your Say consultations linked to this file. Where we publish the positions filed, the title opens them here.

ConsultationFeedback deadlineFeedback received
21 Mar 2021373

Summary

Generated

The NIS2 Directive strengthens cybersecurity risk management and incident reporting obligations across the EU, expanding coverage to sectors such as energy, transport, banking, digital infrastructure, and public administration. It entered into force in January 2023, with member states required to transpose it into national law by October 2024.

What the workspace adds on this file

Everything above is the public record. Subscribers see this page with their own layer on top.

Why it matters to you

What this file means for your organization, assessed against your own priorities.

What moved

When this file moves, it reaches your own briefing, with a link to its source.

Your contacts on it

Your team's contacts logged against this file: who you met, what was said and the next step.

A first draft

A statement, a member update or a meeting brief on this file, in your organization's voice, with its sources.

Sources: EP Legislative Observatory · EUR-Lex. Record as of 14 Sept 2026. Something wrong on this page? Report an error.

Request access

See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.

EU-hosted · GDPR-compliant · Trust Center →

By submitting, you agree to our privacy policy.