EU Cybersecurity Regulations › NIS2 › Related EU regulations
NIS2 transposition tracker
Status of NIS2 transposition for every EU member state as of the last review date. Member states had until 17 October 2024 to transpose; the Commission opened infringement proceedings against 23 of them in April 2025 for missing the deadline.
Last verified:
| Country | Status | National implementing law | In force from | EU infringement |
|---|---|---|---|---|
| Austria AT | Transposed | Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026) | 2026-10-01 | Reasoned opinion |
| Belgium BE | Transposed | Loi du 26 avril 2024 (NIS2 Law) | 2024-10-18 | None |
| Bulgaria BG | Transposed | Закон за изменение и допълнение на Закона за киберсигурност (Act amending the Cybersecurity Act) | 2026-02-17 | Referred to CJEU |
| Croatia HR | Transposed | Zakon o kibernetičkoj sigurnosti (Cybersecurity Act, NN 14/2024) | 2024-02-15 | None |
| Cyprus CY | Transposed | Network and Information Systems Security (Amendment) Law of 2025 (amending L.89(I)/2020) | 2025-04-25 | None |
| Czechia CZ | Transposed | Zákon č. 264/2025 Sb. o kybernetické bezpečnosti (Act No. 264/2025 Coll. on Cybersecurity) | 2025-11-01 | Reasoned opinion |
| Denmark DK | Transposed | Lov nr. 434 af 6. maj 2025 om foranstaltninger til sikring af et højt cybersikkerhedsniveau (Cybersikkerhedsloven) | 2025-07-01 | Reasoned opinion |
| Estonia EE | Transposed | Küberturvalisuse seaduse muutmise seadus (Act amending the Cybersecurity Act, KüTS) | 2026-01-01 | Reasoned opinion |
| Finland FI | Transposed | Kyberturvallisuuslaki 124/2025 (Cybersecurity Act) | 2025-04-08 | Reasoned opinion |
| France FR | Draft / in parliament | Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité (Loi Résilience) — combined NIS2/CER/DORA transposition | — | Referred to CJEU |
| Germany DE | Transposed | NIS-2-Umsetzungs- und Cybersicherheitsstärkungsgesetz (NIS2UmsuCG) | 2025-12-06 | Reasoned opinion |
| Greece GR | Transposed | Νόμος 5160/2024 (Law 5160/2024 transposing the NIS2 Directive) | 2024-11-28 | None |
| Hungary HU | Transposed | 2024. évi LXIX. törvény Magyarország kiberbiztonságáról (Act LXIX of 2024 on the Cybersecurity of Hungary) | 2025-01-01 | Reasoned opinion |
| Ireland IE | Draft / in parliament | General Scheme of the National Cyber Security Bill 2024 (Heads of Bill only; not yet enacted) | — | Referred to CJEU |
| Italy IT | Transposed | Decreto Legislativo 4 settembre 2024, n. 138 | 2024-10-16 | None |
| Latvia LV | Transposed | Nacionālās kiberdrošības likums (National Cybersecurity Law) | 2024-09-01 | None |
| Lithuania LT | Transposed | Lietuvos Respublikos kibernetinio saugumo įstatymo pakeitimo įstatymas (Act amending the Cybersecurity Law) | 2024-10-18 | None |
| Luxembourg LU | Transposed | Loi du 6 mai 2026 portant transposition de la directive (UE) 2022/2555 (Bill 8364) | 2026-05-10 | Referred to CJEU |
| Malta MT | Transposed | Legal Notice 71 of 2025 — Measures for a High Common Level of Cybersecurity across the EU (Malta) Order, 2025 | 2025-04-08 | None |
| Netherlands NL | Draft / in parliament | Cyberbeveiligingswet (Cbw) — Cybersecurity Act, draft bill before the House of Representatives | — | Referred to CJEU |
| Poland PL | Transposed | Ustawa o zmianie ustawy o krajowym systemie cyberbezpieczeństwa (KSC2) | 2026-04-03 | Referred to CJEU |
| Portugal PT | Transposed | Decreto-Lei n.º 125/2025, de 4 de dezembro — Regime Jurídico da Cibersegurança | 2026-04-03 | Reasoned opinion |
| Romania RO | Transposed | Ordonanța de Urgență nr. 155/2024 (OUG 155/2024), confirmed by Law 124/2025 | 2025-01-01 | None |
| Slovakia SK | Transposed | Zákon č. 366/2024 Z. z. (Act No. 366/2024 amending Cybersecurity Act 69/2018) | 2025-01-01 | None |
| Slovenia SI | Transposed | Zakon o informacijski varnosti (ZInfV-1) — Information Security Act | 2025-06-19 | Reasoned opinion |
| Spain ES | Draft / in parliament | Anteproyecto de Ley de Coordinación y Gobernanza de la Ciberseguridad (Draft Bill) | — | Referred to CJEU |
| Sweden SE | Transposed | Cybersäkerhetslag (SFS 2025:1506) — Cybersecurity Act | 2026-01-15 | Reasoned opinion |