{"release":{"id":"f692e60e296675896a76228659509f7752ecc9d80b7b2eb2de129e6b37c8889a","published":"2026-11-02T06:21:07Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"f692e60e296675896a76228659509f7752ecc9d80b7b2eb2de129e6b37c8889a","release_published":"2026-11-02T06:21:07Z","checked_at":"2026-11-02","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/articles/27","url":"https://www.headlesslaw.com/nis2/articles/27","title":"Article 27 — Registry of entities","family":"l1_generated","work_id":"nis2","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Consolidated version of 27 December 2022","check":{"against":"EUR-Lex","on":"2026-11-02"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227","valid_from":"2022-12-27","valid_until":null,"revision":1,"content_id":"493ef78a5087126d","change_date":null,"nearest_versions":["2022-12-27"],"first_text_date":"2022-12-14","correction_applies":false,"versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/articles/27/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/articles/27/versions/2022-12-27/rev/493ef78a5087126d","versions_url":"https://www.headlesslaw.com/nis2/articles/27/versions","relations_url":"https://www.headlesslaw.com/nis2/articles/27/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227","check":{"result":"matched","checked_at":"2026-11-02","against":"EUR-Lex"},"repo_path":null,"body_sha256":"987d9ba8e0a9e8136f119aba2f83e3faa8d85c35d81512ff999d834b7b6e6246","markdown_sha256":"536389f880b96400280aa0f5abeb95153de5a4e58a696e983fb9b9b9269aeae1"},"units":[{"locator":"nis2/art/27","kind":"article","status":"in_force","label":null,"heading":"Registry of entities","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"nis2/art/27/para/1","kind":"paragraph","status":"in_force","label":"1.","heading":null,"text":"ENISA shall create and maintain a registry of DNS service providers, TLD name registries, entities providing domain name registration services, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, as well as providers of online marketplaces, of online search engines and of social networking services platforms, on the basis of the information received from the single points of contact in accordance with paragraph 4. Upon request, ENISA shall allow the competent authorities access to that registry, while ensuring that the confidentiality of information is protected where applicable.","marks":[],"revision":1,"text_hash":"7d831d5670f1d4b0fcbde66966cc718ffc390176c565da039c0048a8ea9b6a84","reason":null},{"locator":"nis2/art/27/para/2","kind":"paragraph","status":"in_force","label":"2.","heading":null,"text":"Member States shall require entities referred to in paragraph 1 to submit the following information to the competent authorities by 17 January 2025:","marks":[],"revision":1,"text_hash":"14a402013e4ba4346adadb092c4a24c5042bff461376f5798844854da5b256c1","reason":null},{"locator":"nis2/art/27/para/2/pt/a","kind":"point","status":"in_force","label":"(a)","heading":null,"text":"the name of the entity;","marks":[],"revision":1,"text_hash":"7d5fa681ad368dcba07d43f4f2f106b7475c6b54118df2067a76f2192928ab97","reason":null},{"locator":"nis2/art/27/para/2/pt/b","kind":"point","status":"in_force","label":"(b)","heading":null,"text":"the relevant sector, subsector and type of entity referred to in Annex I or II, where applicable;","marks":[],"revision":1,"text_hash":"713ee4e6f3f6c931e4e6c68dcfeb21f37b257819e8b42f3dcb2da8b446731403","reason":null},{"locator":"nis2/art/27/para/2/pt/c","kind":"point","status":"in_force","label":"(c)","heading":null,"text":"the address of the entity’s main establishment and its other legal establishments in the Union or, if not established in the Union, of its representative designated pursuant to Article 26(3);","marks":[],"revision":1,"text_hash":"ed9634c56147a3dedd423f5042ea92884ce3b657eacf420f8bdcfb0d3f507800","reason":null},{"locator":"nis2/art/27/para/2/pt/d","kind":"point","status":"in_force","label":"(d)","heading":null,"text":"up-to-date contact details, including email addresses and telephone numbers of the entity and, where applicable, its representative designated pursuant to Article 26(3);","marks":[],"revision":1,"text_hash":"09ee08b43366cea726dec49c979268991119b2e7790a5905348f40c5d38f2d3c","reason":null},{"locator":"nis2/art/27/para/2/pt/e","kind":"point","status":"in_force","label":"(e)","heading":null,"text":"the Member States where the entity provides services; and","marks":[],"revision":1,"text_hash":"f88560cfd5b36c93937c8252bf64d4a075b6ae81f7111cffa7176b825bc6e8b3","reason":null},{"locator":"nis2/art/27/para/2/pt/f","kind":"point","status":"in_force","label":"(f)","heading":null,"text":"the entity’s IP ranges.","marks":[],"revision":1,"text_hash":"2f81e042fd3af15636e7db1fb5181ae405c1c68daaae39dff4f273cf1bf9755d","reason":null},{"locator":"nis2/art/27/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"Member States shall ensure that the entities referred to in paragraph 1 notify the competent authority about any changes to the information they submitted under paragraph 2 without delay and in any event within three months of the date of the change.","marks":[],"revision":1,"text_hash":"dc743738f440b4d7260e66e9a9c24d6fed7a0e842e205b8aaebfcb3494c5ea4f","reason":null},{"locator":"nis2/art/27/para/4","kind":"paragraph","status":"in_force","label":"4.","heading":null,"text":"Upon receipt of the information referred to in paragraphs 2 and 3, except for that referred to in paragraph 2, point (f), the single point of contact of the Member State concerned shall, without undue delay, forward it to ENISA.","marks":[],"revision":1,"text_hash":"302a81e0501a29b3ac53d9e9e6fce59f6c261bf28d665b19f0c86346f8f82615","reason":null},{"locator":"nis2/art/27/para/5","kind":"paragraph","status":"in_force","label":"5.","heading":null,"text":"Where applicable, the information referred to in paragraphs 2 and 3 of this Article shall be submitted through the national mechanism referred to in Article 3(4), fourth subparagraph.","marks":[],"revision":1,"text_hash":"9161d87990dbeca87b9b1d81f116c4d0ee8a10adf406c0d37cbc24cafec38eb9","reason":null}],"markdown":"*In force · Consolidated version of 27 December 2022 · Checked against EUR-Lex on 2 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227)*\n\n1. <a id=\"p-1\"></a>ENISA shall create and maintain a registry of DNS service providers, TLD name registries, entities providing domain name registration services, [cloud computing service](https://www.headlesslaw.com/definitions/nis2/cloud-computing-service) providers, [data centre service](https://www.headlesslaw.com/definitions/nis2/data-centre-service) providers, [content delivery network](https://www.headlesslaw.com/definitions/nis2/content-delivery-network) providers, managed service providers, managed security service providers, as well as providers of online marketplaces, of online search engines and of social networking services platforms, on the basis of the information received from the single points of contact in accordance with paragraph 4. Upon request, ENISA shall allow the competent authorities access to that registry, while ensuring that the confidentiality of information is protected where applicable.\n2. <a id=\"p-2\"></a>Member States shall require entities referred to in paragraph 1 to submit the following information to the competent authorities by 17 January 2025:\n\n    <a id=\"p-2-a\"></a>**(a)** the name of the [entity](https://www.headlesslaw.com/definitions/nis2/entity);\n\n    <a id=\"p-2-b\"></a>**(b)** the relevant sector, subsector and type of entity referred to in Annex I or II, where applicable;\n\n    <a id=\"p-2-c\"></a>**(c)** the address of the entity’s main establishment and its other legal establishments in the Union or, if not established in the Union, of its [representative](https://www.headlesslaw.com/definitions/nis2/representative) designated pursuant to [Article 26(3)](26.md);\n\n    <a id=\"p-2-d\"></a>**(d)** up-to-date contact details, including email addresses and telephone numbers of the entity and, where applicable, its representative designated pursuant to [Article 26(3)](26.md);\n\n    <a id=\"p-2-e\"></a>**(e)** the Member States where the entity provides services; and\n\n    <a id=\"p-2-f\"></a>**(f)** the entity’s IP ranges.\n3. <a id=\"p-3\"></a>Member States shall ensure that the entities referred to in paragraph 1 notify the competent authority about any changes to the information they submitted under paragraph 2 without delay and in any event within three months of the date of the change.\n4. <a id=\"p-4\"></a>Upon receipt of the information referred to in paragraphs 2 and 3, except for that referred to in paragraph 2, point (f), the single point of contact of the Member State concerned shall, without undue delay, forward it to ENISA.\n5. <a id=\"p-5\"></a>Where applicable, the information referred to in paragraphs 2 and 3 of this Article shall be submitted through the national mechanism referred to in [Article 3(4)](3.md), fourth subparagraph.\n\n***\n\n[Chapter V — Jurisdiction and registration](../chapters/v.md) · [← Article 26](26.md) · [Article 28 →](28.md)\n"}