Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 JANUARY 2026

Market Intelligence Thought Leadership Award Winner

Cybersecurity Laws And Regulations EU Cybersecurity Regulatory Landscape: A Deep Dive Into The NIS2 Directive 2026

McDermott Will & Schulte
Explore more from McDermott Will & Schulte

The Network and Information Systems Directive 2022/255 (NIS2) introduces tougher cybersecurity requirements across a broad range of industries...

GermanyTechnology
Matúš Huba
Matúš Huba
Rosa Barcelo
Rosa Barcelo
Natallia Karniyevich
Natallia Karniyevich
Julie Favreau
Julie Favreau
Author LinkedIn connections

1. Executive Summary

The Network and Information Systems Directive 2022/255 (NIS2)1 introduces tougher cybersecurity requirements across a broad range of industries as European countries transpose the NIS2, and from 18 October 2024, it gradually started replacing the "original" Network and Information Systems Directive 2016/1148 (NIS1).2

NIS2 greatly expanded the scope of the NIS1 and applies to a wide range of entities operating across various sectors and industries (including digital infrastructure, manufacturing, health, ICT service management, research, transport, and other highly critical and critical sectors). NIS2 distinguishes between so-called "essential and important entities", imposing different levels of cybersecurity obligations related to their networks and information systems.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Deepfakes, Chatbots, AI-Generated Text: European Commission Details Transparency Obligations Under The AI Act

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
European UnionTechnology
Greenberg Traurig
Greenberg Traurig
Article

Deepfakes, Chatbots, KI-Texte: EU-Kommission Konkretisiert Transparenzpflichten Der KI-Verordnung

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
GermanyTechnology
Greenberg Traurig
Greenberg Traurig
Article

Cybercrime & Compliance: Navigating Risks In A Digital World – A Conference Report

Herbert Smith Freehills Kramer's Frankfurt Corporate Crime & Investigations team hosted a conference examining cybercrime threats, AI-driven attacks, and the evolving responsibilities of corporate leadership in building cyber resilience. Senior representatives from law enforcement, industry leaders, and global legal partners explored prevention strategies, incident response protocols, and the complex liability landscape facing organizations in an increasingly digital threat environment.
GermanyTechnology
Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP