In brief: The NIS2 registration deadline expires on 31 July 2024; non-compliance will be penalised with fines of up to €10 million.
Operators of critical infrastructures and service providers must register by 31 July 2024 in accordance with the NIS2 Directive. Failure to comply will result in fines of up to €10 million.
The Network and Information Security Directive 2 (NIS2) requires operators of critical infrastructures and certain service providers to register with the competent authorities. The deadline is 31 July 2024. Registration documents compliance with cybersecurity requirements and identifies affected organisations at the national level.
Organisations that fail to meet this obligation face significant sanctions: the EU Directive provides for fines of up to €10 million. This threshold was chosen to emphasise the necessity of comprehensive compliance and to penalise negligence in cybersecurity.
For compliance officers, this means that the remaining time until the deadline must be used to complete registration processes. This includes the complete documentation of security measures, confirmation of classification as a critical infrastructure or service provider, and formal notification to the national authorities – in Germany, for example, to the Federal Office for Information Security (BSI).
Source: news.google.com · Published 17 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification through Lumi News Pipeline v1.7.3.