In brief: Despite the expired NIS2 registration deadline, only 18,845 clinics have so far registered with the reporting authorities.
The deadline for registration with the NIS2 reporting authorities has passed, yet only 18,845 clinics have registered so far. For CISOs in the healthcare sector, this means an increased regulatory and operational risk for entities that have not yet registered.
According to ad-hoc-news.de, the statutory deadline for registration under the NIS2 Directive has passed without all affected healthcare entities having fulfilled their reporting obligation. So far, 18,845 clinics have registered with the responsible reporting authorities. The source does not provide a total number of entities actually obligated to register, so the exact compliance rate cannot be derived from it.
For CISOs of hospitals and other operators of critical infrastructure in the healthcare sector, registration is a first, formal step toward implementing NIS2 requirements. Missing or delayed registrations can trigger regulatory consequences, such as fines or intensified reviews by the responsible authorities. Furthermore, a low registration rate signals that many entities may also be behind on the substantive requirements of the Directive — such as risk management, incident reporting obligations, and technical protective measures.
CISOs should review the current registration status of their own organization as well as of relevant service providers and partners in the healthcare sector. Where registration is still pending, prompt action is advised, as increased regulatory scrutiny of latecomers can be expected. The original source does not provide further details on deadline extensions, the amount of sanctions, or a timeline for late registrations.
Source: news.google.com · Published August 5, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.