European Union ·Directive

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)

In force · 14 December 2022

Summary

The NIS 2 Directive replaces the first NIS Directive and extends cybersecurity obligations to many more sectors and entities, classified as essential or important. It requires risk-management measures, multi-stage incident reporting and direct accountability of management bodies. It also strengthens cooperation between Member States through the Cooperation Group, the CSIRTs network and EU-CyCLONe.

Original title

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)

Title in other languages

• Direttiva (UE) 2022/2555 relativa a misure per un livello comune elevato di cibersicurezza nell'Unione (Direttiva NIS 2)
• Directive (UE) 2022/2555 concernant des mesures destinées à assurer un niveau élevé commun de cybersécurité dans l'ensemble de l'Union (directive SRI 2)
• Directiva (UE) 2022/2555 relativa a las medidas destinadas a garantizar un elevado nivel común de ciberseguridad en toda la Unión (Directiva SRI 2)

Jurisdiction

European Union

Issuing body

European Parliament and Council of the European Union

Official number

Directive (EU) 2022/2555

Type

Directive

Date adopted

14 December 2022

Entry into force

16 January 2023

Status

In force

Available languages

English, Italian (official translation), French (official translation), Spanish (official translation), German (official translation)

Topics

• Critical infrastructure
• Governance and coordination
• Incident management / CSIRT
• Supply chain
• Energy
• Health
• Telecommunications
• Digital public administration

Licence / terms of use

EU reuse (Decision 2011/833/EU)

Notes

Member States had to transpose it by 17 October 2024; Directive (EU) 2016/1148 is repealed with effect from 18 October 2024.

Collected from

manuale

Last verified

26 October 2026 (verified via web)

European Parliament and Council of the European Union. (2022). Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive) (Directive (EU) 2022/2555). https://eur-lex.europa.eu/eli/dir/2022/2555/oj

European Parliament and Council of the European Union. "Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)." 14 December 2022. https://eur-lex.europa.eu/eli/dir/2022/2555/oj.

@misc{eu_nis2_directive_2022_2555,
  author       = {{European Parliament and Council of the European Union}},
  title        = {{Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)}},
  year         = {2022},
  note         = {Directive (EU) 2022/2555},
  url          = {https://eur-lex.europa.eu/eli/dir/2022/2555/oj},
  urldate      = {2026-10-26}
}

Report an error in this record