The Netherlands transposed the Directive on measures for a high common level of cybersecurity across the EU (NIS2). The national law transposing NIS2 entered into force on 15 August 2026.
Three member states have not yet transposed NIS2.
The deadline for member states to adopt national legislation transposing the directive was 17 October 2024.

Cullen International is tracking and comparing the progress made by the 27 EU member states in transposing the NIS2 Directive.
For more information on the benchmark and Cullen International's complete NIS2 coverage, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
21 October 26
Americas countries require satellite service providers to obtain a spectrum licence
Cullen International’s latest benchmark compares satellite regulation across the Americas, including service and spectrum licensing, registration requirements, spectrum allocations and fees, interference rules, migration between frequency bands and recent regulatory developments.
21 October 26
Around the world, many regulators examined communications apps through distinct lenses, but their interventions did not always lead to any enforcement
Cullen International's latest Global Trends benchmark for communications apps regulation shows how telecoms, consumer protection, data protection and competition regulators intervene in the number-independent communications apps sector. The benchmark addresses regulation apps such as WhatsApp, WeChat and iMessage across 13 jurisdictions around the world.
20 October 26
What European spectrum regulators do when licences are about to expire
Cullen International’s latest European Benchmark shows that 10 of the 21 studied countries have a general policy of organising a new auction whenever spectrum licences expire.