Art. 3(4) NIS 2

Missed the NIS2 deadline? What to do now

Register now with your country's authority and start on the measures. Your country's law sets the deadline. The table below shows it for all 27 EU countries, with the authority and the portal.

Vyzkoušet 30 dní, peníze zpět
Simon OrzelCory Hisey

Domluvit hovor

Rozhoduje někdo jiný? Jedna stránka pro vaše vedeníBezplatné školení pro vašeho jednatele
Průvodce NIS2: vaše cesta krok za krokem, první body hotové
Simon OrzelSimon Orzel·Průběžně kontrolováno

Programy a členství

NIS2 registration deadlines in all 27 EU countries

As of our list of registration bodies: 2 November 2026. The page on your country explains who the deadline applies to.

CountryAuthority and portal
AustriaBy 4 January 2027Bundesamt für CybersicherheitNIS2 Services (Unternehmensserviceportal)
BelgiumPassed on 18 March 2025CCB (Centre for Cybersecurity Belgium)Safeonweb@Work
BulgariaNone recordedMinistry of Innovation and Digital Transformation (formerly Ministry of e-Government) / State e-Government AgencyNo portal yet
CroatiaNone recordedNHCSC-HR (National Cybersecurity Center)No portal recorded, the country page explains the way
CyprusNone recordedDSA (Digital Security Authority)No portal yet
Czech RepublicPassed on 31 December 2025NÚKIB (Národní úřad pro kybernetickou a informační bezpečnost)Portál NÚKIB
DenmarkPassed on 1 October 2025SAMSIK (Styrelsen for Samfundssikkerhed)Virk
EstoniaPassed on 31 March 2026RIA (Riigi Infosüsteemi Amet)No portal recorded, the country page explains the way
FinlandPassed on 8 May 2025Traficom + sector authorities (NCSC-FI as national CSIRT)No portal recorded, the country page explains the way
FranceNone recordedANSSI (Agence nationale de la sécurité des systèmes d'information)MonEspaceNIS2
GermanyPassed on 6 March 2026BSI (Bundesamt für Sicherheit in der Informationstechnik)BSI-Portal
GreecePassed on 30 September 2025NCSA (National Cyber Security Authority)NIS2 Register (Εγγραφή Οντοτήτων ν. 5160/2024)
HungaryNone recordedSZTFH (Szabályozott Tevékenységek Felügyeleti Hatósága)No portal recorded, the country page explains the way
IrelandNone recordedNCSC (National Cyber Security Centre)No portal yet
ItalyBy 28 February 2027ACN (Agenzia per la Cybersicurezza Nazionale)ACN NIS Portal
LatviaPassed on 1 April 2025NCSC (Nacionālais kiberdrošības centrs, Ministry of Defence) / CERT.LVNo portal recorded, the country page explains the way
LithuaniaNone recordedNKSC (National Cybersecurity Center)No portal recorded, the country page explains the way
LuxembourgPassed on 10 July 2026ILR (Institut Luxembourgeois de Régulation)ILR Guichet (NISS_EE231)
MaltaNone recordedCIPD (Critical Infrastructure Protection Department)No portal recorded, the country page explains the way
NetherlandsPassed on 15 August 2026NCSC-NL (since 1 Jan 2026 merged with DTC and CSIRT-DSP into "versterkt NCSC", SPOC + national CSIRT) + RDI (Rijksinspectie Digitale Infrastructuur, horizontal supervisor)MijnNCSC / Entiteitenregister
PolandPassed on 3 October 2026Ministry of Digital Affairs / CSIRTsSystem S46
PortugalPassed on 15 September 2026CNCS (Centro Nacional de Cibersegurança) + CERT.PTMyCiber
RomaniaPassed on 19 September 2025DNSC (Directoratul Național de Securitate Cibernetică)NIS2@RO Platform
SlovakiaNone recordedNBÚ (Národný bezpečnostný úrad)NBÚ NIS2 portal (nis2.nbu.gov.sk)
SloveniaPassed on 19 December 2025URSIV (Information Security Agency)No portal recorded, the country page explains the way
SpainNone recordedCCN-CERT / INCIBENo portal yet
SwedenNone recordedNCSC (Nationellt cybersäkerhetscenter, at the FRA) + CERT-SENo portal recorded, the country page explains the way

If your company only comes into scope later, for example because it grows, the period in Germany and Poland starts on that day: three months under § 33(1) BSIG, six months under Art. 7c(1) of the Polish National Cybersecurity System Act (KSC).

Every country with its law and the state of transposition

What to do now, in five steps

The steps are the same in every country. Only the authority, the portal and the deadline differ.

1

Find your authority

The member state where your company is established is in charge (Art. 26(1) NIS 2). Exceptions apply, among others, to providers of public electronic communications networks or services and to certain digital providers, such as cloud computing or data centre services. The table above names the authority and the portal.

2

Register now

If the deadline has passed, register now through your authority's portal. Under NIS 2 you give at least your name, address and up-to-date contact details including email addresses, IP ranges and phone numbers, your sector and the EU countries where you provide these services (Art. 3(4)).

3

Write down when you acted

Note when you learned of the duty, when you registered and with which access to the portal. Then you can show later when you acted.

4

Start on the measures

The measures under Art. 21 NIS 2 apply to your company because it is an essential or important entity (Art. 3), not because it registered. Your country sets by when they must be in place. Poland, for example, gives companies that were in scope when its law took effect twelve months.

5

Involve management

Your company's management approves the measures, oversees their implementation and takes part in training (Art. 20 NIS 2).

In Germany: registering with the BSI, step by step

How the walkthrough does it

Registration is the first step of the walkthrough on nisd2.eu. The step knows the authorities of every EU country.

The step explains in plain words what registration is for.

It shows where you register: your country at the top, with its authority and the way to its portal.

You record two details: the ID of your access to the portal and the day you registered.

If it is not possible yet, for example because a letter with your access has not arrived, choose "Not possible yet" and carry on with the next step.

After that the walkthrough takes you through the measures, one item at a time. At the end your management approves them in the app.

Start with registration in the walkthrough

Frequently asked questions

When do I have to register for NIS2?

Your country's law sets the deadline. The table above shows it for every EU country. In Germany you register no later than three months after your company first counts as an entity (§ 33(1) BSIG). For companies covered since the BSIG entered into force on 6 December 2025, the deadline was 6 March 2026.

Can I still register after the deadline?

In Germany, yes, through the same BSI portal. Registrations kept coming in there after the deadline: the federal government reported 19,058 by 31 July 2026, and the BSI counted 20,141 by 30 September 2026. For other countries, ask the authority in the table.

Do the other duties only apply after registration?

No. NIS 2 ties the measures (Art. 21) and management's duties (Art. 20) to your company being an essential or important entity (Art. 3), not to registration. Your country sets by when they must be in place.

We provide cloud or data centre services, or manage other companies' IT. Where do we register?

In the member state of your main establishment in the EU (Art. 26(1)(b) NIS 2). For these providers ENISA also keeps a registry, fed by the information the member states pass on (Art. 27(1)). NIS 2 required the member states to ask for this information by 17 January 2025 (Art. 27(2)).

Our country has no deadline in the table. What does that mean?

Our list has no deadline recorded for that country. That can mean its law does not apply yet, that it names no fixed day, or that no portal is ready yet. The page on your country explains where things stand. You can start on the measures either way.

Sources

Our list of registration bodies

V praxi

Co mění národní zákon a co ne

Národní zákon mimo jiné určuje, kde se registrujete a komu hlásíte incidenty. Samotná opatření vycházejí ve všech členských státech ze stejného minimálního seznamu (čl. 21 NIS 2). Průvodce vás jimi provede krok za krokem:

  1. Řízení rizik

    Sepište, co vaše firma má

    Seznam procesů, programů a zařízení, se kterými pracujete.

  2. Řešení incidentů

    Naplánujte, co se stane při incidentu

    Kdo rozhoduje, komu voláte, jak se spojíte.

  3. Posouzení účinnosti

    Zapište přezkoumání vedením

    Vedení kontroluje, zda opatření fungují, a schvaluje vaše dokumenty.

Kolik průvodce stojí

Průvodce NIS2
Řízené zavedení na nisd2.eu.

4 800 € bez DPH ročně, plus DPH

30 dní na vrácení peněz

Na fakturu, splatnost 30 dní. Zrušení do 30 dnů od první objednávky, před prvním exportem nebo schválením: faktura se stornuje nebo se peníze vrátí.

Řízené zavedení NIS 2 krok za krokem

Historie změn a schválení, kterou můžete ukázat úřadu

Termíny a upozornění ke každému požadavku

Bezpečnostní dotazník pro vaše dodavatele

Export do PDF nebo CSV kdykoli

Ceny a podmínky

Máte se postarat o NIS2?

Provedeme vás krok za krokem. Vy vyplňujete, my vysvětlujeme každý bod srozumitelně a na konci podepisuje vedení.

Vyzkoušet 30 dní, peníze zpět
Simon OrzelCory Hisey

Domluvit hovor

Bezplatné školení pro vašeho jednateleCeny a podmínky
Průvodce NIS2: vaše cesta krok za krokem, první body hotové