NIS2 transposition tracker
Where does each EU Member State stand on bringing NIS2 into national law? Track status, national law names, and entry-into-force dates.
Last updated: 22 April 2026
The table shows the position as at that date, not today. Transposition keeps moving country by country, so before you rely on a row check the national cybersecurity authority linked in the source column, or the European Commission NIS2 portal.
Sources: national cybersecurity agencies and official gazettes.
| Country ▼ | National law | Status | Entry into force | Source |
|---|---|---|---|---|
| Austria | Netz- und Informationssystemsicherheitsgesetz 2024 (NISG 2024) | Transposed | 2025 | Source |
| Belgium | NIS2 Act (implemented via CCB) | Transposed | 18 October 2024 | Source |
| Bulgaria | Status varies, check national authority | Pending | Expected 2026 | Source |
| Croatia | Zakon o kibernetičkoj sigurnosti | Transposed | 2024 | Source |
| Cyprus | Status varies, check national authority | Pending | Expected 2026 | Source |
| Czech Republic | Zákon o kybernetické bezpečnosti (amendment) | In Parliament | Expected Q3 2026 | Source |
| Denmark | Lov om foranstaltninger til sikring af et højt cybersikkerhedsniveau | Transposed | 2025 | Source |
| Estonia | Küberturvalisuse seadus (amendment) | Transposed | 2025 | Source |
| Finland | Kyberturvallisuuslaki | Transposed | 8 April 2025 | Source |
| France | Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité | In Parliament | Expected Q2 2026 | Source |
| Germany | NIS2-Umsetzungs- und Cybersicherheitsstärkungsgesetz (NIS2UmsuCG) | In Parliament | Expected Q2 2026 | Source |
| Greece | Status varies, check national authority | Pending | Expected 2026 | Source |
| Hungary | Kiberbiztonsági törvény | Transposed | 2024 | Source |
| Ireland | National Cyber Security Bill 2024 | In Parliament | Expected Q2 2026 | Source |
| Italy | Decreto Legislativo 138/2024 | Transposed | 16 October 2024 | Source |
| Latvia | Nacionālās kiberdrošības likums | Transposed | 2024 | Source |
| Lithuania | Kibernetinio saugumo įstatymas (amendment) | Transposed | 2024 | Source |
| Luxembourg | Loi relative à la cybersécurité | In Parliament | Expected 2026 | Source |
| Malta | Status varies, check national authority | Pending | Expected 2026 | Source |
| Netherlands | Cyberbeveiligingswet (Cbw) | In Parliament | Expected Q2 2026 | Source |
| Poland | Ustawa o krajowym systemie cyberbezpieczeństwa (amendment) | In Parliament | Expected Q3 2026 | Source |
| Portugal | Status varies, check national authority | Delayed | Expected 2026 | Source |
| Romania | Lege privind cadrul de securitate cibernetică | Transposed | 2024 | Source |
| Slovakia | Zákon o kybernetickej bezpečnosti (amendment) | Transposed | 2024 | Source |
| Slovenia | Zakon o informacijski varnosti | In Parliament | Expected 2026 | Source |
| Spain | Anteproyecto de Ley de Coordinación y Gobernanza de la Ciberseguridad | In Parliament | Expected Q3 2026 | Source |
| Sweden | Cybersäkerhetslag | In Parliament | Expected Q2 2026 | Source |
Where status is marked "Status varies", please consult the national authority directly or the European Commission NIS2 portal.
Not sure how your country's law affects you?
National transposition laws often go beyond the minimum requirements of the Directive. A quick call clarifies what actually applies to your organization.