NIS2 across Europe
Where NIS2 stands in every EU country
Our goal is to support the local NIS2 transposition of every member state. Track each country's transposition status and maturity below — and see which ones Reglyze already supports natively.
Data as of 2026-10-24
30
Countries tracked
23
In force
10
Supported by Reglyze
5
Verified entries
| Country | Transposition | Target date | Maturity | Reglyze support | Sources |
|---|---|---|---|---|---|
Austria Provisional | In force EU infringement procedure open NISG 2026 (BGBl. I Nr. 94/2025) | — | Supported | ||
Belgium Verified | Enforcing Loi NIS2 — 26 avril 2024 | — | Native · CyFun | ||
Bulgaria Provisional | In force Cybersecurity Act amendment (ДВ бр. 17/2026) | — | Not yet High priority | ||
Croatia Provisional | In force | — | Native | ||
Cyprus Provisional | In force N. 60(I)/2025 (amends N. 89(I)/2020) | — | Not yet High priority | ||
Czechia Provisional | In force | — | Not yet High priority | ||
Denmark Provisional | In force NIS2-loven (LOV nr 434 af 06/05/2025) | — | Not yet High priority | ||
Estonia Provisional | In force | — | Not yet High priority | ||
Finland Provisional | In force | — | Not yet High priority | ||
France Verified | Draft law EU infringement procedure open Loi Résilience (en attente de promulgation) | — | Native · ReCyF | ||
Germany Auto-updated — pending verification | In force BSIG (Gesetz zur Erhöhung der Sicherheit der Informationstechnik des Bundes) | — | Native · IT-Grundschutz | ||
Greece Provisional | In force | — | Not yet High priority | ||
Hungary Provisional | In force | — | Not yet High priority | ||
Iceland Provisional | Not transposed | — | Not yet Low priority | ||
Ireland Auto-updated — pending verification | Not transposed EU infringement procedure open | — | Not yet Low priority | ||
Italy Verified | Enforcing NIS2 Directive transposition | — | Native · Misure ACN | ||
Latvia Provisional | In force | — | Not yet High priority | ||
Liechtenstein Provisional | Not transposed | — | Not yet Low priority | ||
Lithuania Provisional | In force | — | Not yet High priority | ||
Luxembourg Provisional | In force | — | Not yet High priority | ||
Malta Provisional | In force S.L. 460.41 (L.N. 22 of 2026) | — | Not yet High priority | ||
Netherlands Auto-updated — pending verification | Not transposed EU infringement procedure open Cyberbeveiligingswet (Stb. 2026, 187) | Aug 2026 | Supported | ||
Norway Provisional | Not transposed | — | Not yet Low priority | ||
Poland Verified | In force KSC amendment (Dz.U. 2026 poz. 252) | — | Native | ||
Portugal Verified | In force DL 125/2025 (RJC) | — | Native | ||
Romania Provisional | In force | — | Not yet High priority | ||
Slovakia Provisional | In force | — | Not yet High priority | ||
Slovenia Provisional | In force ZInfV-1 (Uradni list RS, št. 40/2025) | — | Not yet High priority | ||
Spain Auto-updated — pending verification | Not transposed EU infringement procedure open | — | Native | ||
Sweden Provisional | In force Cybersäkerhetslag (SFS 2025:1506) | — | Not yet High priority |
Methodology & sources
Verified entries are checked against the official national publication. The other countries are provisional: first drafts, or sourced records awaiting a native reviewer. An automated sweep reads the official sources every week and records stage changes with their citation; it does not replace verification. Every entry links to its official source.