Country tracker
Where each member state stands
NIS2 is a directive: each member state writes it into national law, so the exact rules and timing vary. Search for a country to check where things stand.
Showing all 12 member states.
| Member state | Status | Notes |
|---|---|---|
| Belgium | Transposed | Among the first — national law in force since October 2024. |
| Croatia | Transposed | Cybersecurity Act in force. |
| Hungary | Transposed | National cybersecurity framework adopted. |
| Italy | Transposed | Legislative decree in force, overseen by the ACN. |
| Lithuania | Transposed | National cybersecurity law updated. |
| Germany | In progress | Implementation act (NIS2UmsuCG) advancing through the legislative process. |
| France | In progress | Transposition law progressing through the legislature. |
| Spain | In progress | Draft law under parliamentary review. |
| Netherlands | In progress | Cyberbeveiligingswet (Cybersecurity Act) expected to enter into force. |
| Poland | In progress | Amendment to the national cybersecurity act underway. |
| Sweden | In progress | Government proposal presented; entry into force scheduled. |
| Ireland | In progress | National Cyber Security Bill progressing. |
How to read this
- Transposed — national law adopted and in force.
- In progress — a draft law is tabled or advancing.
Illustrative snapshot for orientation only — last reviewed July 2026. Transposition is ongoing and dates change frequently; always verify against the official source in your jurisdiction.
Know the directive, then the local law
Start with the fundamentals of NIS2, then confirm the specifics of your national transposition.
Read the overview →