NIS2: Understanding Cybersecurity Incident Notifications

The European Union's revised NIS2 Directive (Network and Information Systems Directive) (NIS2) establishes clear instructions for how companies and public sector bodies should respond to cybersecurity attacks.

The proposed National Cyber Security Bill (CSB), still in preparation, is the legislative measure to transpose NIS2 into Irish law. As of the date of this article, the general scheme of the CSB is available but the CSB has not yet been drafted or put before the Oireachtas. Because of the 2024 general election, the Irish Government missed the 17 October 2024 deadline for EU member states to transpose NIS2 into domestic law. The newly formed Irish Government published its Spring 2025 Legislative Programme on 18 February 2025, and the CSB has been assigned for priority drafting during the Spring session.