Luxembourg transposed the Directive on measures for a high common level of cybersecurity across the EU (NIS2). The national transposition entered into force on 10 May 2026.
Four member states have not yet transposed NIS2.
The deadline for member states to adopt national legislation transposing the directive was 17 October 2024.
Cullen International is tracking and comparing the progress made by the 27 EU member states in transposing the NIS2 Directive.
For more information on the benchmark and Cullen International's complete NIS2 coverage, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
15 June 26
Global trends in regulating cross-border personal data transfers
Our latest Global Trends benchmark compares key aspects of the regulation of cross-border personal data transfers across 14 jurisdictions worldwide.
12 June 26
Status of national AI laws across Europe
Our new benchmark tracks national laws implementing the AI Act, looking into the procedure for adoption and the core provisions.
11 June 26
Electric power backup and other redundancies for telecoms operators across Europe
This new Benchmark explores electric power backup and other redundancy requirements for mobile network operators to ensure service continuity during power outages, natural disasters, and other events impacting the operation of telecoms networks.