ہوم › قوانین کی لائبریری › NIS2
NIS2
Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)
دو ذرائع سے تصدیق شدہ. آخری تصدیق 10 اکتوبر، 2026
اگلی مکمل جانچ: . ریگولیٹرز کی خبریں ہر ماہ دیکھی جاتی ہیں؛ تبدیلیاں درج ہوتی ہیں: تبدیلیوں کا ریکارڈ.
اس صفحے کا حوالہ دیں: GlanceDesk Jurisdiction, “NIS2 (European Union)”, glancedeskjurisdiction.com/laws/eu-nis2, last verified 10 October 2026.
European Union سائبر سیکیورٹی
- حیثیت
- In force since 16 Jan 2023; transposition deadline 17 Oct 2024 (NIS1 repealed 18 Oct 2024). Applies via national laws.✓
- یہ کن پر لاگو ہوتا ہے
- Medium and large public/private entities in Annex I (high-criticality) and Annex II (other critical) sectors providing services in the EU; some (e.g. DNS, TLD registries, trust services, telecoms) regardless of size. Non-EU digital providers must appoint an EU representative.✓
- سائز کی حدیں
- Size-cap rule: medium or large enterprises under Recommendation 2003/361/EC — 50+ staff, or annual turnover and balance-sheet total both above EUR 10m (partner and linked enterprises aggregated). Large entities in Annex I are usually 'essential'; others 'important'. Some sectors (e.g. DNS, trust services, public administration) are covered regardless of size.✓
- ریگولیٹر
- National competent authorities and CSIRTs in each Member State; ENISA and the NIS Cooperation Group at EU level✓
- خلاف ورزی یا واقعے کی رپورٹنگ
- Significant incidents to CSIRT/authority: early warning within 24h, incident notification within 72h, final report within 1 month of the notification. Inform service recipients where relevant.✓
- ڈیٹا پروٹیکشن آفیسر
- No named officer, but management bodies must approve and oversee cybersecurity measures, take training, and can be held personally liable.✓
- مقامی نمائندہ
- Certain non-EU digital providers (e.g. cloud, DNS, online marketplaces, search, social platforms) offering services in the EU must designate an EU representative by written mandate.✓
- زیادہ سے زیادہ سزا
- Essential entities: maximum of at least EUR 10m or 2% of worldwide turnover; important entities: at least EUR 7m or 1.4% (whichever higher). National caps may be higher.✓
جن حقائق پر “تصدیق جاری ہے” لکھا ہے ان کی ابھی تصدیق ہو رہی ہے اور انہیں جواب کے طور پر نہیں دیا جاتا۔
آپ کو کیا کرنا ہوگا✓
- Check whether your sector (Annex I/II) and size bring you into scope; register with the national authority.
- Have management approve cybersecurity risk measures and complete training.
- Implement Art 21 measures: risk analysis, incident handling, backups, MFA, encryption, supply-chain security.
- Set up a process to send 24h early warnings and 72h notifications of significant incidents.
- Assess security of suppliers and service providers.
- Follow the national transposition law in each country where you operate.
حالیہ تبدیلیاں
On 8 Jul 2026 the Commission referred Ireland, Spain, France and the Netherlands to the CJEU for late transposition; the Netherlands' law then took effect on 15 Aug 2026. Commission proposed targeted NIS2 simplifications on 20 Jan 2026 (pending).✓
ذرائع
- بنیادی ذریعہ: https://digital-strategy.ec.europa.eu/en/policies/nis2-directive
- دوسرا ذریعہ: https://www.twobirds.com/en/insights/2025/understanding-key-eu-cybersecurity-legislative-acts-nis2,-cer,-and-cra
- ریگولیٹر: National competent authorities and CSIRTs in each Member State; ENISA and the NIS Cooperation Group at EU level
آزادانہ جانچ کے لیے استعمال ہونے والے ذرائع (16)
- https://digital-strategy.ec.europa.eu/en/policies/nis2-directive
- https://oeil.europarl.europa.eu/oeil/en/document-summary?id=1728967
- https://cm.twobirds.com/-/media/new-website-content/pdfs/trending-topics/nis2-flyer.pdf
- https://ncsc.gov.ie/pdfs/NIS2_NCSC_Conference_2024_Slides.pdf
- https://rgpd.com/nis2-directive/chapter-1-general-provisions/article-3-essential-and-important-entities
- https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555
- https://www.insideprivacy.com/data-security/cybersecurity/european-commission-proposes-targeted-amendments-to-nis2-to-simplify-compliance-and-align-with-proposed-cybersecurity-act-2/
- https://www.ncsc.gov.ie/pdfs/NCSC_NIS2_4_INCIDENT.pdf
- https://www.williamfry.com/knowledge/nis2-understanding-cybersecurity-incident-notifications/
- https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32022L2555
- https://rgpd.com/nis2-directive/chapter-5-jurisdiction-and-registration/article-26-jurisdiction-and-territoriality
- https://www.ncsc.gov.ie/pdfs/NCSC_NIS2_7_ENFORCEMENT.pdf
- https://rgpd.com/nis2-directive/chapter-7-supervision-and-enforcement/article-34-general-conditions-for-imposing-administrative-fines-on-essential-and-important-entities
- https://digital-strategy.ec.europa.eu/en/news/commission-refers-ireland-spain-france-and-netherlands-court-justice-failing-transpose-rules
- https://www.rijksoverheid.nl/actueel/nieuws/2026/08/15/cyberbeveiligingswet-en-wet-weerbaarheid-kritieke-entiteiten-vanaf-vandaag-van-kracht
- https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker
= دو آزاد ذرائع سے تصدیق شدہ، جن میں کم از کم ایک سرکاری ہے۔ ہم تصدیق کیسے کرتے ہیں
صرف معلومات، قانونی مشورہ نہیں۔ قوانین بدلتے رہتے ہیں؛ اس صفحے پر انحصار کرنے سے پہلے ریگولیٹر یا کسی مستند وکیل سے تصدیق کریں۔ کوئی غلطی نظر آئی؟ ای میل کریں contact@