NIS 2 Directive – Enhanced Common Level Cybersecurity Across The EU

Background

The NIS Directive was the first piece of EU-wide legislation on cybersecurity, and aimed to achieve a high common level of cybersecurity across the EU.

NIS 2 Directive¹ has expanded its scope by effectively requiring more entities and sectors to take measures and is therefore widely relevant most of the technology sector.

It aims to strengthen the security requirements, address the security of supply chains, streamline reporting obligations, and introduce stricter enforcement requirements, including harmonised EU sanctions.

The NIS 2 Directive was published in the Official Journal of the European Union on 27 December 2022 and EU Member States have 21 months (by 17 October 2024) from the entry into force to transpose the provisions of the Directive into their national law.