NIS 2 Directive

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL concerning measures to ensure a high common level of network and information security across the Union

Stage: In force
Transposition deadline: 9 May 2018
Procedure: Directive
Last activity: 6 Jul 2016

1 act

Delegated and implementing acts beneath it

By status: 1 published.

Act	Kind	Status	Adoption
Commission Delegated Directive (EU) 2014/16	Implementing · Regulation	Published

Titles link to EUR-Lex where the act has been published.

Summary

Generated

The NIS 2 Directive requires critical sectors (energy, transport, banking, health, digital infrastructure, public administration) to adopt risk management measures and report serious incidents. It establishes a cooperation framework among member states and sets supervisory and enforcement obligations for national authorities. The legislation is in force, replacing the original 2016 NIS Directive.

What the workspace adds on this file

Everything above is the public record. Subscribers see this page with their own layer on top.

Why it matters to you

What this file means for your organization, assessed against your own priorities.

What moved

When this file moves, it reaches your own briefing, with a link to its source.

Your contacts on it

Your team's contacts logged against this file: who you met, what was said and the next step.

A first draft

A statement, a member update or a meeting brief on this file, in your organization's voice, with its sources.

Sources: EUR-Lex. Record as of 14 Sept 2026. Something wrong on this page? Report an error.

Request access

See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.

EU-hosted · GDPR-compliant · Trust Center →

By submitting, you agree to our privacy policy.