Skip to content
RGPD

Article 41

Transposition

1.   By 17 October 2024, Member States shall adopt and publish the measures necessary to comply with this Directive. They shall immediately inform the Commission thereof.

They shall apply those measures from 18 October 2024.

2.   When Member States adopt the measures referred to in paragraph 1, they shall contain a reference to this Directive or shall be accompanied by such reference on the occasion of their official publication. The methods of making such reference shall be laid down by Member States.

Common Questions

Frequently Asked Questions

By when must EU countries put the NIS2 directive into action?
EU countries must officially adopt and publicly announce their measures to follow the NIS2 directive by October 17, 2024, and then begin actually using these measures starting from the following day, October 18, 2024, to ensure timely and uniform cybersecurity measures across the European Union.
Do EU Member States need to inform the European Commission once they adopt the new rules?
Yes, EU Member States must immediately notify the European Commission as soon as they have put their national measures in place to comply with NIS2, to allow coordination and ensure that each country aligns properly with the cybersecurity standards required by the directive.
Are Member States required to mention NIS2 when they publish their new cybersecurity laws?
Yes, when publishing their measures related to NIS2, Member States must explicitly refer to this directive or include a clear reference alongside the official announcement, ensuring citizens can easily understand that these changes come directly from following the EU-wide cybersecurity directive.
Who decides how Member States should reference the NIS2 directive in their regulations?
Each Member State individually decides the exact method they will use to clearly refer to or mention the NIS2 directive when publishing their cybersecurity regulations, allowing for flexibility to accommodate different national publication practices and procedures while ensuring clarity about the directive's role.
← Article 40 Article 42 →