NIS2 Implementation Tracker

43578010 - modern web network and internet telecommunication technology, big data storage and cloud computing computer service business concept: server room interior in datacenter in blue light43578010 - modern web network and internet telecommunication technology, big data storage and cloud computing computer service business concept: server room interior in datacenter in blue light

NIS2 Implementation Tracker

EU Member States Overview

January 21, 2026

AustriaBelgiumBulgariaCzech RepublicEstoniaFinlandFranceGermanyHungaryIrelandItalyLatviaLithuaniaLuxembourgNetherlandsPolandPortugalRomaniaSlovakiaSpainSweden
AustriaBelgiumBulgariaCzech RepublicEstoniaFinlandFranceGermanyHungaryIrelandItalyLatviaLithuaniaLuxembourgNetherlandsPolandPortugalRomaniaSlovakiaSpainSweden
Austria
Our newly updated NIS2 Implementation Tracker PDF is now live, giving you a clear, at‑a‑glance overview of where every EU Member State stands on NIS2 transposition.
 
 

The NIS2 Directive continues to reshape cybersecurity obligations across the EU. Although the official transposition deadline passed in October 2024, our latest analysis shows that implementation across Member States remains highly uneven. Several countries have completed the process, while others are still progressing through draft laws or parliamentary stages.

For organisations operating across multiple jurisdictions, this means compliance timelines and enforcement risks still vary significantly, making proactive planning essential.

Our newly updated NIS2 Implementation Tracker provides clear, country-by-country insights, including recent developments such as:

  • Germany completing implementation in December 2025
  • Austria publishing its NISG 2026 Act
  • Portugal’s final draft now published, entering into force April 2026
  • Sweden adopting its Cyber Security Act and Ordinance
  • Ongoing legislative activity in Poland, Luxembourg, Ireland, France and others

Explore the full PDF overview shown below for a short, accessible, at‑a‑glance breakdown of where each Member State stands. 

 

You can also find out more information by visiting our NIS2 hub.

The materials on the Eversheds Sutherland website are for general information purposes only and do not constitute legal advice. While reasonable care is taken to ensure accuracy, the materials may not reflect the most current legal developments. Eversheds Sutherland disclaims liability for actions taken based on the materials. Always consult a qualified lawyer for specific legal matters. To view the full disclaimer, see our Terms and Conditions or Disclaimer section in the footer.

Services

Industries

Key contacts

nilsmueller@eversheds-sutherland.com

Nils Müller

Partner

Munich, Germany | Hamburg, Germany

olafvanhaperen@eversheds-sutherland.com

Olaf van Haperen

Partner

Rotterdam, Netherlands

Latest Insights

  • legal updates
  • legal updates
  • legal updates
  • legal updates

Latest News

Latest Events

Curved modern skyscraper glass facade blue sky

legal updates

July 22, 2026

47006486_l

legal updates

July 20, 2026

Modern Building

legal updates

July 17, 2026

grass and trees in a park

legal updates

July 17, 2026

© Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed or affiliated firms and the members of Eversheds Sutherland (Europe) Limited and Eversheds Sutherland (Africa) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global entity. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website. For information on Konexo please also see the Legal Notices page of this website.