BILL·legislative alert
Sign in
2026/0012(COD)E1st reading – European Parliament

Amending the NIS 2 Directive as regards simplification measures and alignment with the Cybersecurity Act 2

With the European Parliament, which is preparing its first-reading position.

Last active 09 Jun 2026

Track this billGet an email when the proposal moves: phase change, new document, or terminal outcome.

What this bill does

In plain terms: what it changes and who it affects.

This proposal simplifies and updates EU cybersecurity rules for critical and digital service entities under the NIS 2 Directive.

Who it affects

It affects essential and important entities in critical sectors, including digital identity wallet providers, DNS providers, electricity producers, air carriers, submarine data infrastructure operators, and small mid-cap businesses.

Core of the proposal
  • Allows cybersecurity certification to demonstrate compliance with NIS 2 risk-management duties.
  • Classifies small mid-cap entities in Annex I sectors generally as important entities.
  • Adds ransomware data reporting requirements, including ransom demands and payments on request.
  • Gives ENISA a support role in cross-border supervision and mutual assistance.
Key provisions
Takes effect
The Directive enters into force on the twentieth day following publication in the Official Journal.
Transitional law
Member States must transpose it within 12 months and apply those measures from the following day.
Articles changed · 14 across 1 law
  • Directive (EU) 2022/2555 (32022L2555)
    • art. 2: amends paragraph 2; inserts new paragraph 3a
    • art. 3: amends paragraph 1 and replaces paragraph 4 first subparagraph
    • art. 5: replaces Article 5
    • art. 6: adds points 42 and 43
    • art. 7(2): adds point k
    • art. 15(2): replaces first sentence
    • art. 21(5): replaces second subparagraph and adds fifth subparagraph
    • art. 23: adds paragraphs 12 and 13
    • art. 24: adds paragraphs 4, 5 and 6
    • art. 26: adds paragraph 1 point d and replaces paragraph 3
    • art. 27: replaces paragraph 1; deletes paragraph 2; replaces paragraphs 3 to 5
    • art. 37a: inserts new Article 37a on ENISA’s mutual assistance role
    • art. Annex I: amended in accordance with the Annex to this Directive
    • art. Annex II: amended in accordance with the Annex to this Directive

Latest update

12 Jun 2026

The most recent development in this bill's progress.

1st reading – European Parliament → 1st reading – European Parliament

1st reading – European Parliament → 1st reading – European Parliament

Documents

1 recent

SourcesOEILEUR-LexEU Law Tracker