Bottom line: Approximately 11,000 businesses have not met the NIS2 registration deadline (31 July) and must act quickly to avoid sanctions.
The registration deadline for the NIS2 Directive ends on 31 July — approximately 11,000 businesses have not yet registered and risk consequences after the deadline expires.
The National Contact Point for reporting affected businesses and critical infrastructures under the NIS2 Directive is in its final weeks. By 31 July, all affected organisations must complete their registration to comply with the requirements of the Directive.
The figure of approximately 11,000 unregistered businesses points to significant implementation gaps. These organisations must act quickly to avoid administrative or sanctioning measures after the cut-off date. The NIS2 Directive requires operators of critical infrastructures and businesses of a certain size and sector to register and comply with tightened cybersecurity standards.
CISOs should ensure that their organisations verify their registration status and submit any missing documentation, security measures or evidence by the deadline. Late or missing registration can lead to administrative proceedings, warnings or fines and damage the company’s reputation.
Source: news.google.com · Published 9 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.