In Brief: The registration deadline for NIS2 compliance ends on 31 July with substantial penalties for non-compliance.
Operators of critical infrastructures and services must register with their supervisory authorities by 31 July 2024 for the NIS2 Directive. Breaches of this deadline can result in fines of up to €500,000.
The implementation of the EU NIS2 Directive requires operators of critical infrastructures, digital service providers and supply chain service providers to register with the competent national authorities. This registration obligation affects companies above certain thresholds in the sectors of energy, transport, water, health, financial market infrastructure and digital services as well as their suppliers.
For compliance officers, adherence to this deadline is essential, as non-registration results in substantial penalties. The EU Directive provides for fines of up to €500,000, and in some national implementations, penalties may be even higher. In addition to the financial burden, regulatory sanctions and reputational damage are at risk.
Companies should verify whether they or their suppliers are subject to the registration obligation by comparing their activities against the NIS2 thresholds. Following this, they should promptly contact the relevant authority. In Germany, the Federal Office for Information Security (BSI) coordinates implementation. Additional state authorities may be responsible in the individual federal states.
Source: news.google.com · Published 8 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.