--- title: "Article 31 — General aspects concerning supervision and enforcement" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227" source_retrieved: 2026-10-01 shortTitle: "Article 31 — General aspects concerning supervision and enforcement" instrument_type: level1_directive authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Directive (EU) 2022/2555" instrument: nis2 celex: "32022L2555" regulation: NIS2 regulation-full: "Directive (EU) 2022/2555" article: 31 status: in_force object_id: eu.nis2.legal_text.article.31 text_version: "Consolidated version of 27 December 2022" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Consolidated version of 27 December 2022 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227)* 1. Member States shall ensure that their competent authorities effectively supervise and take the measures necessary to ensure compliance with this Directive. 2. Member States may allow their competent authorities to prioritise supervisory tasks. Such prioritisation shall be based on a risk-based approach. To that end, when exercising their supervisory tasks provided for in [Articles 32](32.md) and [33](33.md), the competent authorities may establish supervisory methodologies allowing for a prioritisation of such tasks following a risk-based approach. 3. The competent authorities shall work in close cooperation with supervisory authorities under Regulation (EU) 2016/679 when addressing incidents resulting in personal data breaches, without prejudice to the competence and tasks of the supervisory authorities under that Regulation. 4. Without prejudice to national legislative and institutional frameworks, Member States shall ensure that, in the supervision of compliance of public administration entities with this Directive and the imposition of enforcement measures with regard to infringements of this Directive, the competent authorities have appropriate powers to carry out such tasks with operational independence vis-à-vis the public administration entities supervised. Member States may decide on the imposition of appropriate, proportionate and effective supervisory and enforcement measures in relation to those entities in accordance with the national legislative and institutional frameworks. *** [Chapter VII — Supervision and enforcement](../chapters/vii.md) · [← Article 30](30.md) · [Article 32 →](32.md)