On 27 December 2022, the Directive on "measures for a high
common level of cybersecurity across the Union", repealing
Directive (EU) 2016/1148 (the "NIS 2 Directive"), was
published in the Official Journal of the European Union. The NIS 2
Directive builds on a previous NIS Directive adopted in 2016
expanding its scope to other entities. Due to a rising number of
cybersecurity incidents1 as well as ongoing increased
digitalization, the aim of the NIS 2 Directive is to cover more
economic sectors and to introduce additional security and reporting
requirements across all EU Member States. Member States will have
until 17 October 2024 to transpose the NIS 2 Directive into their
national laws.
