Luxembourg transposed the Directive on measures for a high common level of cybersecurity across the EU (NIS2). The national transposition entered into force on 10 May 2026.
Four member states have not yet transposed NIS2.
The deadline for member states to adopt national legislation transposing the directive was 17 October 2024.

Cullen International is tracking and comparing the progress made by the 27 EU member states in transposing the NIS2 Directive.
For more information on the benchmark and Cullen International's complete NIS2 coverage, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
28 May 26
Open RAN adoption remains limited to select markets
Our latest global trends benchmark on the adoption of open radio access network (open RAN) architecture covers commercial deployments, policy support and the emerging AI-RAN trend.
27 May 26
Inconsistent reporting hampers assessment of postal sector’s environmental performance
Our new report, from Cullen International’s recently launched Transport & Delivery Sustainability service, details how postal service providers currently report on their environmental performance.
20 May 26
Spectrum sharing in Europe
Spectrum is a scarce resource and can be used more efficiently when multiple users agree to share it. Cullen International designed two new benchmarks that examine the regulation and practice of spectrum sharing in 21 European countries.