The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you

NIS2

NIS2 registration, state by state

27 states read, 19 with a registration open today. Each one links to its own page.

NIS2 registration, state by state
Member stateRegistrationAuthority
AustriaOpenBundesamt für Cybersicherheit (BCS), reporting to the Bundesministerium für Inneres
BelgiumOpenCentre for Cybersecurity Belgium (CCB)
BulgariaThe authority enters entitiesминистърът на електронното управление keeps the register; the national competent authority is sector by sector under Article 16(1), with the Комисия за регулиране на съобщенията named for electronic communications and trust services and the Висш съдебен съвет for the judiciary
CroatiaThe authority enters entitiesSigurnosno-obavještajna agencija (SOA), named the central state body for cyber security by Article 61(2) of the Act, acting through the Nacionalni centar za kibernetičku sigurnost; Annex III gives a different competent authority per sector, the Hrvatska narodna banka for banking and HANFA for financial market infrastructure
CyprusThe authority enters entitiesDigital Security Authority (Αρχή Ψηφιακής Ασφάλειας)
CzechiaOpenNárodní úřad pro kybernetickou a informační bezpečnost (NÚKIB)
DenmarkOpenStyrelsen for Samfundssikkerhed (SAMSIK), with sector-responsible authorities alongside it
EstoniaOpenRiigi Infosüsteemi Amet (RIA), which houses NCSC-EE and CERT-EE
FinlandOpenthe supervisory authority of the entity's own sector, with NCSC-FI at Traficom guiding
FranceOpens laterANSSI
GermanyOpenBundesamt für Sicherheit in der Informationstechnik (BSI)
GreeceOpenΕθνική Αρχή Κυβερνοασφάλειας (National Cybersecurity Authority, EAK)
HungaryOpenSzabályozott Tevékenységek Felügyeleti Hatósága (SZTFH) for the private entities in the Act's Annexes 2 and 3, under § 23(1)(b); the national cybersecurity authority designated by Government Decree supervises state and municipal bodies under § 23(1)(a)
IrelandNo route yetNational Cyber Security Centre (NCSC Ireland)
ItalyOpenAgenzia per la cybersicurezza nazionale (ACN)
LatviaOpenNacionālais kiberdrošības centrs (NKDC)
LithuaniaThe authority enters entitiesNacionalinis kibernetinio saugumo centras (NKSC)
LuxembourgOpenInstitut Luxembourgeois de Régulation (ILR)
MaltaNot foundCritical Infrastructure Protection Directorate (CIPD), Ministry for Home Affairs
NetherlandsOpenNationaal Cyber Security Centrum (NCSC), Ministerie van Justitie en Veiligheid
PolandOpenMinisterstwo Cyfryzacji
PortugalOpenCentro Nacional de Cibersegurança (CNCS)
RomaniaOpenDirectoratul Național de Securitate Cibernetică (DNSC)
SlovakiaOpenNárodný bezpečnostný úrad (NBÚ)
SloveniaOpenUrad Vlade Republike Slovenije za informacijsko varnost (URSIV), named as the competent national authority by Article 10(1) ZInfV-1
SpainNot foundnot established: the transposing law has not been notified
SwedenOpenNationellt cybersäkerhetscenter (NCSC) at FRA, which took the function from Myndigheten för civilt försvar on 1 July 2026

A state we have not read says so. That is a different fact from a state with no route, and from one whose authority enters entities itself.

Related:The NIS2 scope toolThe transposition registerSee the NIS2 Registration Pack

This page in:DeutschFrançaisNederlandsEspañolDansk