The Netherlands transposed the Directive on measures for a high common level of cybersecurity across the EU (NIS2). The national law transposing NIS2 entered into force on 15 August 2026.
Three member states have not yet transposed NIS2.
The deadline for member states to adopt national legislation transposing the directive was 17 October 2024.
Cullen International is tracking and comparing the progress made by the 27 EU member states in transposing the NIS2 Directive.
For more information on the benchmark and Cullen International's complete NIS2 coverage, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
09 October 26
Four LATAM countries address connectivity gaps
Cullen International’s latest LATAM Telecoms Update highlights policy developments over the past three months affecting the regulation of radio spectrum, wholesale networks and consumer protection in six markets in the region: Argentina, Brazil, Chile, Colombia, Mexico and Peru.
08 October 26
Many European countries consider banning minors from accessing social media
Cullen International has just published a new version of its benchmark which tracks the current debates/ initiatives on banning access to social media to protect minors online in Europe.
05 October 26
Ireland, the Netherlands and France account for the highest sum of data protection fines against large digital platforms
Our latest benchmark tracks fines imposed on large digital platforms by data protection and other supervisory authorities in 19 European countries since May 2018. It covers GDPR and e-Privacy Directive infringements and identifies whether the GDPR consistency mechanism was used in cross-border cases.