NIS2 Directive (NIS2)

Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)

Recitals (144)

CHAPTER I: GENERAL PROVISIONS

CHAPTER II: COORDINATED CYBERSECURITY FRAMEWORKS

  • Article 7 National cybersecurity strategy
  • Article 8 Competent authorities and single points of contact
  • Article 9 National cyber crisis management frameworks
  • Article 10 Computer security incident response teams (CSIRTs)
  • Article 11 Requirements, technical capabilities and tasks of CSIRTs
  • Article 12 Coordinated vulnerability disclosure and a European vulnerability database
  • Article 13 Cooperation at national level

CHAPTER III: COOPERATION AT UNION AND INTERNATIONAL LEVEL

CHAPTER IV: CYBERSECURITY RISK-MANAGEMENT MEASURES AND REPORTING OBLIGATIONS

CHAPTER V: JURISDICTION AND REGISTRATION

CHAPTER VI: INFORMATION SHARING

  • Article 29 Cybersecurity information-sharing arrangements
  • Article 30 Voluntary notification of relevant information

CHAPTER VII: SUPERVISION AND ENFORCEMENT

  • Article 31 General aspects concerning supervision and enforcement
  • Article 32 Supervisory and enforcement measures in relation to essential entities
  • Article 33 Supervisory and enforcement measures in relation to important entities
  • Article 34 General conditions for imposing administrative fines on essential and important entities
  • Article 35 Infringements entailing a personal data breach
  • Article 36 Penalties
  • Article 37 Mutual assistance

CHAPTER VIII: DELEGATED AND IMPLEMENTING ACTS

CHAPTER IX: FINAL PROVISIONS

NIS2 is a Directive: the binding obligations live in each Member State's transposing national law, and this is the EU Directive text those laws implement.

Source text: EUR-Lex, Official Journal HTML (CELEX 32022L2555). The parser was validated against the anchor articles verified in REP-08.