NIS2 across Europe

Where NIS2 stands in every EU country

Name: NIS2 transposition tracker — where every EU country stands
Creator: Reglyze

Our goal is to support the local NIS2 transposition of every member state. Track each country's transposition status and maturity below — and see which ones Reglyze already supports natively.

Data as of 2026-06-12

Countries tracked

In force

Supported by Reglyze

Verified entries

Country	Transposition	Target date	Reglyze support	Sources
Austria Provisional	Adopted EU infringement procedure open NISG 2026 (BGBl. I Nr. 94/2025)	Oct 2026	Not yet Medium priority	RIS — BGBl. I Nr. 94/2025 (NISG 2026)
Belgium Verified	Enforcing Loi NIS2 — 26 avril 2024	—	Native · CyFun	CCB — Centre for Cybersecurity Belgium
Bulgaria Provisional	In force Cybersecurity Act amendment (ДВ бр. 17/2026)	—	Not yet High priority	Държавен вестник бр. 17/2026 — Закон за киберсигурност (изм.)
Croatia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Cyprus Provisional	In force N. 60(I)/2025 (amends N. 89(I)/2020)	—	Not yet High priority	CyLaw — Ν. 60(Ι)/2025 (Επίσημη Εφημερίδα Αρ. 5036)
Czechia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Denmark Provisional	In force NIS2-loven (LOV nr 434 af 06/05/2025)	—	Not yet High priority	Styrelsen for Samfundssikkerhed — NIS2 i dansk ret
Estonia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Finland Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
France Verified	Draft law EU infringement procedure open Loi Résilience (en attente de promulgation)	—	Native · ReCyF	ANSSI — La directive NIS 2
Germany Verified	In force NIS2UmsuCG	—	Native · IT-Grundschutz	BSI — NIS-2-Umsetzung
Greece Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Hungary Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Iceland Provisional	Not transposed	—	Not yet Low priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Ireland Provisional	Draft law EU infringement procedure open	—	Not yet Medium priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Italy Verified	Enforcing NIS2 Directive transposition	—	Native · Misure ACN	Official source (auto-updated)ACN — Agenzia per la Cybersicurezza Nazionale
Latvia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Liechtenstein Provisional	Not transposed	—	Not yet Low priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Lithuania Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Luxembourg Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Malta Provisional	In force S.L. 460.41 (L.N. 22 of 2026)	—	Not yet High priority	Legislation Malta — L.N. 22 of 2026 (S.L. 460.41)
Netherlands Provisional	Draft law EU infringement procedure open	—	Not yet Medium priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Norway Provisional	Not transposed	—	Not yet Low priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Poland Verified	In force KSC amendment (Dz.U. 2026 poz. 252)	—	Native	Sejm — Dz.U. 2026 poz. 252 (ELI)gov.pl — Narodowe Standardy Cyberbezpieczeństwa
Portugal Verified	In force DL 125/2025 (RJC)	—	Native	CNCS — Centro Nacional de Cibersegurança
Romania Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Slovakia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Slovenia Provisional	In force	—	Not yet High priority	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Spain Provisional	Draft law EU infringement procedure open	—	Native	European Commission — NIS2 Directive ENISA — National CSIRTs by country
Sweden Provisional	In force Cybersäkerhetslag (SFS 2025:1506)	—	Not yet High priority	Riksdagen — SFS 2025:1506 Cybersäkerhetslag

Methodology & sources

Verified entries (FR, IT, DE, PT, BE) are checked against the official national source. Other countries are shown as provisional first-drafts pending verification, refreshed weekly by Reglyze's regulatory watch. Every entry links to its official source.

Is your country covered?

Reglyze runs your NIS2 compliance against your country's own national framework — not a generic checklist. Start free and see your local requirements.