Bottom line: Approximately 12,000 companies failed to meet the NIS2 Directive registration deadline and now face regulatory consequences.
The NIS2 Directive registration deadline has expired. According to estimates, approximately 12,000 companies have not fulfilled their reporting obligation.
With the expiration of the registration deadline under NIS2 provisions, an estimated 12,000 companies have failed to fulfill their reporting obligation. The NIS2 Directive (Network and Information Security) requires operators of critical infrastructures and certain digital service providers to register with the competent national authorities.
For affected compliance officers, this situation entails concrete regulatory risks: unregistered companies are considered non-compliant and may face fine procedures, operating bans, or heightened inspections. National supervisory authorities now have lists of delinquent companies and will work through them systematically.
Companies that have missed the deadline should immediately contact their competent authority and submit their registration belatedly. The faster the registration is submitted, the more limited the authority’s discretion typically is in making sanctioning decisions. In parallel, it is necessary to document what reasons caused the delay and which measures to establish compliance have already been initiated.
Source: news.google.com · Published 1 August 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.