RISI

NIS2 › NIS2 transposition tracker

Luxembourg · LU

Loi du 6 mai 2026 portant transposition de la directive (UE) 2022/2555 (Bill 8364)

← Back to tracker

Status
Transposed
In force from
2026-05-10
Implementing law
Loi du 6 mai 2026 portant transposition de la directive (UE) 2022/2555 (Bill 8364)
EU infringement procedure
Referred to CJEU
Competent authority
Institut Luxembourgeois de Régulation (ILR) for most sectors; CSSF for banking and financial market infrastructures Competent authority NIS2 page →
National CSIRT
GOVCERT.LU (within the HCPN) CSIRT website →

Notable national choices

  • Very late transposition — entered into application only on 10 May 2026, about 19 months after the EU deadline.
  • Split competent-authority model: ILR for most sectors, CSSF for finance — reflecting Luxembourg's financial-centre status.
  • Self-registration deadline 10 July 2026 (two months after entry into force).

Sources

Last verified: