> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/nis2/readme.md). # NIS2 *In force · Consolidated version of 27 December 2022 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227) **Directive (EU) 2022/2555** — of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) The full text is available article by article, one page per article (`articles/`). Every numbered paragraph and point carries a stable anchor (`#p-3` for paragraph 3, `#p-3-a` for its point (a)), so any provision can be cited with a direct link. The English consolidated manifestation from CELLAR is reproduced verbatim; the official text remains the EU publication at [EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227). ### Contents #### [Chapter I — General provisions](/nis2/chapters/i.md) * [Article 1 — Subject matter](/nis2/articles/1.md) * [Article 2 — Scope](/nis2/articles/2.md) * [Article 3 — Essential and important entities](/nis2/articles/3.md) * [Article 4 — Sector-specific Union legal acts](/nis2/articles/4.md) * [Article 5 — Minimum harmonisation](/nis2/articles/5.md) * [Article 6 — Definitions](/nis2/articles/6.md) #### [Chapter II — Coordinated cybersecurity regulatory frameworks](/nis2/chapters/ii.md) * [Article 7 — National cybersecurity strategy](/nis2/articles/7.md) * [Article 8 — Competent authorities and single points of contact](/nis2/articles/8.md) * [Article 9 — National cyber crisis management frameworks](/nis2/articles/9.md) * [Article 10 — Computer security incident response teams (CSIRTs)](/nis2/articles/10.md) * [Article 11 — Requirements, technical capabilities and tasks of CSIRTs](/nis2/articles/11.md) * [Article 12 — Coordinated vulnerability disclosure and a European vulnerability database](/nis2/articles/12.md) * [Article 13 — Cooperation at national level](/nis2/articles/13.md) * [Article 14 — Cooperation Group](/nis2/articles/14.md) #### [Chapter III — Cooperation at Union and international level](/nis2/chapters/iii.md) * [Article 15 — CSIRTs network](/nis2/articles/15.md) * [Article 16 — European cyber crisis liaison organisation network (EU-CyCLONe)](/nis2/articles/16.md) * [Article 17 — International cooperation](/nis2/articles/17.md) * [Article 18 — Report on the state of cybersecurity in the Union](/nis2/articles/18.md) * [Article 19 — Peer reviews](/nis2/articles/19.md) #### [Chapter IV — Cybersecurity risk-management measures and reporting obligations](/nis2/chapters/iv.md) * [Article 20 — Governance](/nis2/articles/20.md) * [Article 21 — Cybersecurity risk-management measures](/nis2/articles/21.md) * [Article 22 — Union level coordinated security risk assessments of critical supply chains](/nis2/articles/22.md) * [Article 23 — Reporting obligations](/nis2/articles/23.md) * [Article 24 — Use of European cybersecurity certification schemes](/nis2/articles/24.md) * [Article 25 — Standardisation](/nis2/articles/25.md) #### [Chapter V — Jurisdiction and registration](/nis2/chapters/v.md) * [Article 26 — Jurisdiction and territoriality](/nis2/articles/26.md) * [Article 27 — Registry of entities](/nis2/articles/27.md) * [Article 28 — Database of domain name registration data](/nis2/articles/28.md) #### [Chapter VI — Information sharing](/nis2/chapters/vi.md) * [Article 29 — Cybersecurity information-sharing arrangements](/nis2/articles/29.md) * [Article 30 — Voluntary notification of relevant information](/nis2/articles/30.md) #### [Chapter VII — Supervision and enforcement](/nis2/chapters/vii.md) * [Article 31 — General aspects concerning supervision and enforcement](/nis2/articles/31.md) * [Article 32 — Supervisory and enforcement measures in relation to essential entities](/nis2/articles/32.md) * [Article 33 — Supervisory and enforcement measures in relation to important entities](/nis2/articles/33.md) * [Article 34 — General conditions for imposing administrative fines on essential and important entities](/nis2/articles/34.md) * [Article 35 — Infringements entailing a personal data breach](/nis2/articles/35.md) * [Article 36 — Penalties](/nis2/articles/36.md) * [Article 37 — Mutual assistance](/nis2/articles/37.md) #### [Chapter VIII — Delegated and implementing acts](/nis2/chapters/viii.md) * [Article 38 — Exercise of the delegation](/nis2/articles/38.md) * [Article 39 — Committee procedure](/nis2/articles/39.md) #### [Chapter IX — Final provisions](/nis2/chapters/ix.md) * [Article 40 — Review](/nis2/articles/40.md) * [Article 41 — Transposition](/nis2/articles/41.md) * [Article 42 — Amendment of Regulation (EU) No 910/2014](/nis2/articles/42.md) * [Article 43 — Amendment of Directive (EU) 2018/1972](/nis2/articles/43.md) * [Article 44 — Repeal](/nis2/articles/44.md) * [Article 45 — Entry into force](/nis2/articles/45.md) * [Article 46 — Addressees](/nis2/articles/46.md) ### Level 2 and Level 3 * [Level 3](/nis2/level-3.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.headlesslaw.com/nis2/readme.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.