NIS2 across the EU 🇪🇺

NIS2 by country: transposition status

NIS2 is one EU directive, but it takes effect through each Member State's own law, authority and reporting channel. Here is where all 27 stand and who supervises, with detailed pages for key markets.

20 in force · 7 in progress· Status reviewed: June 2026

National law in force

· 20

Belgium

CCB — Centre for Cybersecurity Belgium

Detailed page →

Croatia

ZSIS — Zavod za sigurnost informacijskih sustava

Detailed page →

Czechia

NÚKIB — National Cyber and Information Security Agency

Detailed page →

Denmark

SAMSIK — Styrelsen for Samfundssikkerhed

Detailed page →

Estonia

RIA — Information System Authority

Detailed page →

Finland

Traficom — Kyberturvallisuuskeskus (NCSC-FI)

Detailed page →

Germany

BSI — Bundesamt für Sicherheit in der Informationstechnik

Detailed page →

Greece

National Cybersecurity Authority (NCSA)

Detailed page →

Hungary

SZTFH — Authority for the Supervision of Regulated Activities

Detailed page →

Italy

ACN — Agenzia per la Cybersicurezza Nazionale

Detailed page →

Latvia

CERT.LV / National Cyber Security Centre

Detailed page →

Lithuania

NKSC — National Cyber Security Centre

Detailed page →

Luxembourg

ILR — Institut Luxembourgeois de Régulation

Detailed page →

Malta

CIPD — Critical Infrastructure Protection (CSIRTMalta)

Detailed page →

Poland

Ministerstwo Cyfryzacji & sector authorities

Detailed page →

Portugal

CNCS — Centro Nacional de Cibersegurança

Detailed page →

Romania

DNSC — Directoratul Național de Securitate Cibernetică

Detailed page →

Slovakia

NBÚ — Národný bezpečnostný úrad

Detailed page →

Slovenia

URSIV — Uprava RS za informacijsko varnost

Detailed page →

Sweden

NCSC — Nationellt cybersäkerhetscenter (FRA)

Detailed page →

Transposition in progress

· 7

Austria

Bundesamt für Cybersicherheit (NISG 2026)

In force from Oct 1, 2026

Detailed page →

Bulgaria

CERT Bulgaria / Ministry of e-Government

Detailed page →

Cyprus

DSA — Digital Security Authority

Detailed page →

France

ANSSI — Agence nationale de la sécurité des systèmes d'information

Detailed page →

Ireland

NCSC — National Cyber Security Centre

Detailed page →

Netherlands

RDI — Rijksinspectie Digitale Infrastructuur

In force from Aug 15, 2026

Detailed page →

Spain

INCIBE-CERT & CCN-CERT

Detailed page →

National transposition evolves. Always confirm the current status with the authority below and the European Commission's transposition tracker. EU transposition tracker

See NIS2-grade supplier monitoring

A sample supplier report (findings, NIS2 mapping and evidence) in two minutes.

View sample report

See the sample dashboard