The deadline extension is not an all-clear signal, but signals the beginning of stricter enforcement from 2027 onwards – as experience with GDPR and NIS2 shows.
The Commission provides authorities and critical infrastructure operators with interpretation guidelines for a key compliance provision of the NIS2 Directive.
The Commission defines binding interpretation guidelines for the resilience requirements of the NIS2 Directive and thereby clarifies the implementation obligations for critical infrastructure operators.
