NIS2 across the EU 🇪🇺

NIS2 by country: transposition status

NIS2 is one EU directive, but it takes effect through each Member State's own law, authority and reporting channel. Here is where all 27 stand and who supervises — with detailed pages for key markets.

20 in force · 7 in progress· Status reviewed: 2026-06

National law in force

· 20

Belgium

CCB — Centre for Cybersecurity Belgium

Detailed page →

Croatia

ZSIS — Zavod za sigurnost informacijskih sustava

Detailed page →

Czechia

NÚKIB — National Cyber and Information Security Agency

Detailed page →

Denmark

Center for Cybersikkerhed (CFCS)

Detailed page →

Estonia

RIA — Information System Authority

Detailed page →

Finland

Traficom — Kyberturvallisuuskeskus (NCSC-FI)

Detailed page →

Germany

BSI — Bundesamt für Sicherheit in der Informationstechnik

Detailed page →

Greece

National Cybersecurity Authority (NCSA)

Detailed page →

Hungary

SZTFH — Authority for the Supervision of Regulated Activities

Detailed page →

Italy

ACN — Agenzia per la Cybersicurezza Nazionale

Detailed page →

Latvia

CERT.LV / National Cyber Security Centre

Detailed page →

Lithuania

NKSC — National Cyber Security Centre

Detailed page →

Luxembourg

ILR — Institut Luxembourgeois de Régulation

Detailed page →

Malta

CIPD — Critical Infrastructure Protection (CSIRTMalta)

Detailed page →

Poland

Ministerstwo Cyfryzacji & sector authorities

Detailed page →

Portugal

CNCS — Centro Nacional de Cibersegurança

Detailed page →

Romania

DNSC — Directoratul Național de Securitate Cibernetică

Detailed page →

Slovakia

NBÚ — Národný bezpečnostný úrad

Detailed page →

Slovenia

URSIV — Uprava RS za informacijsko varnost

Detailed page →

Sweden

MSB — Myndigheten för samhällsskydd och beredskap

Detailed page →

Transposition in progress

· 7

Austria

Bundesamt für Cybersicherheit (NISG 2026)

Detailed page →

Bulgaria

CERT Bulgaria / Ministry of e-Government

Detailed page →

Cyprus

DSA — Digital Security Authority

Detailed page →

France

ANSSI — Agence nationale de la sécurité des systèmes d'information

Detailed page →

Ireland

NCSC — National Cyber Security Centre

Detailed page →

Netherlands

RDI — Rijksinspectie Digitale Infrastructuur

Detailed page →

Spain

INCIBE-CERT & CCN-CERT

Detailed page →

National transposition evolves. Always confirm the current status with the authority below and the European Commission's transposition tracker. EU transposition tracker

See NIS2-grade supplier monitoring

A sample supplier report — findings, NIS2 mapping and evidence — in two minutes.

View sample report