Every country transposes differently.
Twenty-seven jurisdictions, one platform.
While Directive 2022/2555 sets the framework, each EU member state transposes NIS2 into national law differently. Transposition laws vary in their scope extensions, penalty levels, sector definitions, entity classification thresholds, and reporting timelines. Konforme tracks each country’s specific rules so your compliance posture reflects the law that actually applies to you.
i.
National transpositions.
🇦🇹
Austria
NISG 2024
Transposed
🇧🇪
Belgium
Loi NIS2 2024
Transposed
🇧🇬
Bulgaria
Cybersecurity Act
In progress
🇭🇷
Croatia
Zakon o kibernetičkoj sigurnosti
Transposed
🇨🇾
Cyprus
NIS Law 2024
In progress
🇨🇿
Czech Republic
Zákon o kybernetické bezpečnosti
Transposed
🇩🇰
Denmark
NIS2-loven
Transposed
🇪🇪
Estonia
Küberturvalisuse seadus
Transposed
🇫🇮
Finland
Kyberturvallisuuslaki
Transposed
🇫🇷
France
Transposition NIS 2
Transposed
🇩🇪
Germany
NIS2UmsuCG
Transposed
🇬🇷
Greece
NIS2 Law
Transposed
🇭🇺
Hungary
Kiberbiztonsági törvény
Transposed
🇮🇪
Ireland
NIS2 Regulations 2024
Transposed
🇮🇹
Italy
D.Lgs. 138/2024
Transposed
🇱🇻
Latvia
NIS2 likums
Transposed
🇱🇹
Lithuania
Kibernetinio saugumo įstatymas
Transposed
🇱🇺
Luxembourg
Loi NIS2
Transposed
🇲🇹
Malta
NIS Regulations
In progress
🇳🇱
Netherlands
Cbw (Cyberbeveiligingswet)
Transposed
🇵🇱
Poland
Ustawa o KSC
Transposed
🇵🇹
Portugal
DL 125/2025
Transposed
🇷🇴
Romania
NIS2 Law
Transposed
🇸🇰
Slovakia
Zákon o kybernetickej bezpečnosti
Transposed
🇸🇮
Slovenia
ZInfV-1
Transposed
🇪🇸
Spain
Transposición NIS2
Transposed
🇸🇪
Sweden
Cybersäkerhetslagen
Transposed
ii.
What we track per country.
| Data point | Description | |
|---|---|---|
| i. | National transposition law | The specific legislation, publication date, and entry into force. |
| ii. | Competent authority & CSIRT | Contact details for the national regulator and computer security incident response team. |
| iii. | Entity classification | Essential, Important, or Public entity thresholds with country-specific size and sector definitions. |
| iv. | Sector-specific requirements | Additional sectors or requirements added by the national transposition. |
| v. | Compliance deadlines | Registration, reporting, and implementation deadlines specific to each country. |
| vi. | Penalty levels | Maximum fines per entity type and management liability provisions. |