NIS2 transposition tracker
Where does each EU Member State stand on bringing NIS2 into national law? Track status, national law names, and entry-into-force dates.
Last updated: 5 October 2026
The table shows the position as at that date, not today. Transposition keeps moving country by country, so before you rely on a row check the national cybersecurity authority linked in the source column, or the European Commission NIS2 portal.
Sources: national cybersecurity agencies and official gazettes.
| Country ▼ | National law | Status | Entry into force | Source |
|---|---|---|---|---|
| Austria | Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), BGBl. I Nr. 94/2025 | Transposed | 1 October 2026 | Source |
| Belgium | Loi du 26 avril 2024 / Wet van 26 april 2024 (NIS2-wet) | Transposed | 18 October 2024 | Source |
| Bulgaria | Act amending the Cybersecurity Act (State Gazette no. 17 of 2026) | Transposed | Promulgated 13 February 2026 | Source |
| Croatia | Zakon o kibernetičkoj sigurnosti (Narodne novine 14/2024) | Transposed | 15 February 2024 | Source |
| Cyprus | Law 60(I)/2025 amending the Security of Networks and Information Systems Law 89(I)/2020 | Transposed | 25 April 2025 | Source |
| Czech Republic | Zákon č. 264/2025 Sb., o kybernetické bezpečnosti | Transposed | 1 November 2025 | Source |
| Denmark | Lov om foranstaltninger til sikring af et højt cybersikkerhedsniveau (NIS 2-loven), lov nr. 434 af 6. maj 2025 | Transposed | 1 July 2025 | Source |
| Estonia | Küberturvalisuse seaduse ja teiste seaduste muutmise seadus (RT I, 30.12.2025, 4) | Transposed | 1 January 2026 | Source |
| Finland | Kyberturvallisuuslaki (124/2025) | Transposed | 8 April 2025 | Source |
| France | Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité | In Parliament | First reading, Assemblée nationale | Source |
| Germany | Gesetz zur Umsetzung der NIS-2-Richtlinie (BGBl. 2025 I Nr. 301) | Transposed | 6 December 2025 | Source |
| Greece | Law 5160/2024 (ΦΕΚ Α’ 195/27.11.2024) | Transposed | 27 November 2024 | Source |
| Hungary | 2024. évi LXIX. törvény Magyarország kiberbiztonságáról | Transposed | 1 January 2025 | Source |
| Ireland | National Cyber Security Bill (not yet published as a bill) | Delayed | Bill not yet published (September 2026) | Source |
| Italy | Decreto legislativo 4 settembre 2024, n. 138 | Transposed | 16 October 2024 | Source |
| Latvia | Nacionālās kiberdrošības likums | Transposed | 1 September 2024 | Source |
| Lithuania | Kibernetinio saugumo įstatymo pakeitimo įstatymas, Nr. XIV-2902 | Transposed | 18 October 2024 | Source |
| Luxembourg | Loi du 5 mai 2026 concernant des mesures destinées à assurer un niveau élevé de cybersécurité | Transposed | 10 May 2026 | Source |
| Malta | Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order, 2025 (L.N. 71 of 2025) | Transposed | 23 January 2026 | Source |
| Netherlands | Cyberbeveiligingswet (Cbw), Staatsblad 2026, 187 | Transposed | 15 August 2026 | Source |
| Poland | Ustawa z dnia 23 stycznia 2026 r. o zmianie ustawy o krajowym systemie cyberbezpieczeństwa (Dz.U. 2026 poz. 252) | Transposed | 3 April 2026 | Source |
| Portugal | Decreto-Lei n.º 125/2025, de 4 de dezembro | Transposed | 3 April 2026 | Source |
| Romania | Ordonanța de urgență a Guvernului nr. 155/2024 | Transposed | 31 December 2024 | Source |
| Slovakia | Zákon č. 366/2024 Z. z. (amending Act 69/2018 on cybersecurity) | Transposed | 1 January 2025 | Source |
| Slovenia | Zakon o informacijski varnosti (ZInfV-1), Uradni list RS, št. 40/2025 | Transposed | 19 June 2025 | Source |
| Spain | Anteproyecto de Ley de Coordinación y Gobernanza de la Ciberseguridad | Delayed | Draft law, not yet in parliament | Source |
| Sweden | Cybersäkerhetslag (2025:1506) | Transposed | 15 January 2026 | Source |
The date is the day the national law entered into force. Where the gazette only gives a promulgation date, or the law is not yet adopted, the row says so. Some laws phase in individual obligations later; the linked source has the detail.
Not sure how your country's law affects you?
National transposition laws often go beyond the minimum requirements of the Directive. A quick call clarifies what actually applies to your organization.