Netherlands · NL

← Back to tracker

Status

Draft / in parliament

In force from

—

Implementing law

Cyberbeveiligingswet (Cbw) — Cybersecurity Act, draft bill before the House of Representatives

EU infringement procedure

Referred to CJEU

Competent authority

Multiple sectoral authorities coordinated by the Rijksinspectie Digitale Infrastructuur (RDI) and the Ministry of Justice and Security Competent authority NIS2 page →

National CSIRT

Nationaal Cyber Security Centrum (NCSC-NL) CSIRT website →

Notable national choices

• Not yet transposed as of May 2026; the Tweede Kamer plenary debate originally scheduled for March 2026 was repeatedly postponed and the bill remains in the lower chamber. The interim Wbni from NIS1 still applies.
• Bill foresees phased entry into force — different provisions may take effect on different dates.
• Distributed sectoral supervisory model rather than a single national regulator.

Sources

• https://www.digitalsecurityinstituut.nl/en/nieuws/ingang-nis2-cyberbeveiligingswet-verder-uitgesteld
• https://www.taylorwessing.com/en/global-data-hub/2026/cyber-security/gdh---nis2-implementation-in-the-netherlands
• https://digital-strategy.ec.europa.eu/en/policies/nis2-directive-netherlands

Last verified: 2026-05-27