NIS2 fine exposure calculator
Estimate your maximum administrative fine exposure under NIS2 Article 34. Enter your turnover and entity classification to see the ceiling.
Global annual turnover for the preceding financial year.
Your maximum fine exposure
Enter a turnover to calculate
Minimum cap set by NIS2 Article 34.
2% of global annual turnover
Plus personal liability for directors and board members
Under Article 20, management bodies of Essential and Important Entities must approve and oversee cybersecurity risk management measures. Competent authorities can hold them personally accountable for breaches, including through suspension, temporary bans from management positions, and individual fines in some Member States.
Want this figure in writing?
Leave your email and Burak sends you the calculation, the Article 34 basis under it, and the measures that reduce the exposure most for your size. No newsletter.
Indicative only. Actual fine amounts are discretionary and determined per Member State based on gravity, duration, intent, mitigation, and cooperation. Some national transposition laws set higher ceilings. This calculator shows the statutory minimum cap under Article 34 of Directive (EU) 2022/2555.
Reduce this exposure.
A proper Article 21 risk management programme, implemented by a certified Lead Implementer, substantially reduces both the probability and the severity of fines.
Worked examples at a few turnover levels
The ceiling is the greater of a fixed amount and a percentage of global annual turnover: €10 million or 2% for an essential entity, €7 million or 1.4% for an important entity. The table shows what that works out to.
| Global annual turnover | Essential entity ceiling | Set by | Important entity ceiling | Set by |
|---|---|---|---|---|
| €10,000,000 | €10,000,000 | €10 million fixed amount | €7,000,000 | €7 million fixed amount |
| €50,000,000 | €10,000,000 | €10 million fixed amount | €7,000,000 | €7 million fixed amount |
| €100,000,000 | €10,000,000 | €10 million fixed amount | €7,000,000 | €7 million fixed amount |
| €250,000,000 | €10,000,000 | €10 million fixed amount | €7,000,000 | €7 million fixed amount |
| €500,000,000 | €10,000,000 | both, they are equal here | €7,000,000 | both, they are equal here |
| €1,000,000,000 | €20,000,000 | 2% of turnover | €14,000,000 | 1.4% of turnover |
| €5,000,000,000 | €100,000,000 | 2% of turnover | €70,000,000 | 1.4% of turnover |
Both classes cross over at €500 million of turnover. Below that the fixed amount decides the ceiling, so every essential entity under €500 million faces the same €10,000,000 and every important entity under €500 million the same €7,000,000. Above €500 million the percentage takes over and the ceiling rises with turnover.
These are the statutory minimum caps of Article 34 of Directive (EU) 2022/2555. A national transposition law can set a higher ceiling, and what a supervisor actually imposes depends on gravity, duration, intent, mitigation and cooperation.