Law

Cybersecurity Act (Cbw)

In force since 15 August 2026Record checked against the official source on 29 October 2026 · Methodology

Official number
Stb. 2026, 187
Date adopted
Entry into force

Summary

The act transposes the NIS 2 Directive in the Netherlands and replaces the Network and Information Systems Security Act (Wbni). It requires essential and important entities to register, exercise a duty of care in managing risks and report incidents; it entered into force together with the Critical Entities Resilience Act (Wwke).

Key dates

  1. National register of entities set up; digital service providers (DNS, cloud, data centres, managed services and online platforms) submit information for the ENISA register
  2. Deadline for members of management bodies to have cybersecurity knowledge and skills

Information

Jurisdiction
Netherlands
Issuing body
Staten-Generaal (States General of the Netherlands)
Type
Law
Available languages
Dutch
Topics
Notes
Passed by the House of Representatives on 15 April 2026 and by the Senate on 7 July 2026, signed on 8 July and published on 10 July 2026 (Stb. 2026, 187). It entered into force on 15 August 2026 together with the implementing decree (Cyberbeveiligingsbesluit, Stb. 2026, 189) and the Critical Entities Resilience Act (Wwke); it replaces the Wbni. On the same day, 8 July 2026, the Commission had referred the Netherlands to the Court of Justice. For higher education institutions designated as entities, the duty of care and governance rules apply 36 months after designation.

Record details

Original title
Cyberbeveiligingswet (Cbw)
Title in other languages
  • Legge sulla cybersicurezza (Cbw)
  • Loi sur la cybersécurité (Cbw)
  • Ley de ciberseguridad (Cbw)
  • Cybersicherheitsgesetz (Cbw)
Licence / terms of use
Public domain / official act – Act published in the official gazette: legislative texts and official acts are excluded from copyright protection under national law.
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

Staten-Generaal (States General of the Netherlands). (2026). Cyberbeveiligingswet (Cbw) (Stb. 2026, 187). https://zoek.officielebekendmakingen.nl/stb-2026-187.html

Chicago

Staten-Generaal (States General of the Netherlands). "Cyberbeveiligingswet (Cbw)." 8 July 2026. https://zoek.officielebekendmakingen.nl/stb-2026-187.html.

BibTeX

@misc{nl_cyberbeveiligingswet_2026,
  author       = {{Staten-Generaal (States General of the Netherlands)}},
  title        = {{Cyberbeveiligingswet (Cbw)}},
  year         = {2026},
  note         = {Stb. 2026, 187},
  url          = {https://zoek.officielebekendmakingen.nl/stb-2026-187.html},
  urldate      = {2026-10-29}
}

Metadata and summary: CC BY 4.0 · JSON