icon-grid
Better Regulation logo
Table of Contents

Table of Contents

Expand all headings Collapse all headings Expand side bar Collapse side bar
Directive 2016/1148/EU - Network and Information Security Directive (NIS) (also known as the EU Cybersecurity Directive)RecitalsChapter I General provisions (arts. 1-6)Article 1 Subject matter and scopeArticle 2 Processing of personal dataArticle 3 Minimum harmonisationArticle 4 DefinitionsArticle 5 Identification of operators of essential servicesArticle 6 Significant disruptive effectChapter II National frameworks on the security of network and information systems (arts. 7-10)Article 7 National strategy on the security of network and information systemsArticle 8 National competent authorities and single point of contactArticle 9 Computer security incident response teams (CSIRTs)Article 10 Cooperation at national levelChapter III Cooperation (arts. 11-13)Article 11 Cooperation GroupArticle 12 CSIRTs networkArticle 13 International cooperationChapter IV Security of the network and information systems of operators of essential services (arts. 14-15)Article 14 Security requirements and incident notificationArticle 15 Implementation and enforcementChapter V Security of the network and information systems of digital service providers (arts. 16-18)Article 16 Security requirements and incident notificationArticle 17 Implementation and enforcementArticle 18 Jurisdiction and territorialityChapter VI Standardisation and voluntary notification (arts. 19-20)Article 19 StandardisationArticle 20 Voluntary notificationChapter VII Final provisions (arts. 21-27)Article 21 PenaltiesArticle 22 Committee procedureArticle 23 ReviewArticle 24 Transitional measuresArticle 25 TranspositionArticle 26 Entry into forceArticle 27 AddresseesAnnex I Requirements and tasks of computer security incident response teams(CSIRTs)Annex II Types of entities for the purposes of point (4) of Article 4Annex III Types of digital services for the purposes of point (5) of Article 4Done at
Related
Document Overview
Tools
Set a date to view the document
Text comparison options
Full text - Date 1 vs Date 2
Amendments requiring commencement - Current text vs Text requiring commencement
Draft proposed changes - Current text vs Text proposed by drafting documents
Coming soon: Any documents - Any document vs Another document at any date
Print / Export options
Whole document
Selected pages
Consolidated PDF of the entire document as of 24th December 2024
Original PDF
Export
Export line by line
Export provision to provision
Report template
Create report template
Alert me to changes
Manage alerts
Bookmarks
This document
Manage bookmarks
Search within this document
View previous searches
Share
Original source link (1)
Original source link (2)
Get page link
Share via email application
Next
Version status: Repealed | Document consolidation status: Updated to reflect all known changes
Published date: 19 July 2016

Directive 2016/1148/EU - Network and Information Security Directive (NIS) (also known as the EU Cybersecurity Directive)

Recitals
Chapter I General provisions (arts. 1-6)
Article 1 Subject matter and scope
Article 2 Processing of personal data
Article 3 Minimum harmonisation
Article 4 Definitions
Article 5 Identification of operators of essential services
Article 6 Significant disruptive effect
Chapter II National frameworks on the security of network and information systems (arts. 7-10)
Article 7 National strategy on the security of network and information systems
Article 8 National competent authorities and single point of contact
Article 9 Computer security incident response teams (CSIRTs)
Article 10 Cooperation at national level
Chapter III Cooperation (arts. 11-13)
Article 11 Cooperation Group
Article 12 CSIRTs network
Article 13 International cooperation
Chapter IV Security of the network and information systems of operators of essential services (arts. 14-15)
Article 14 Security requirements and incident notification
Article 15 Implementation and enforcement
Chapter V Security of the network and information systems of digital service providers (arts. 16-18)
Article 16 Security requirements and incident notification
Article 17 Implementation and enforcement
Article 18 Jurisdiction and territoriality
Chapter VI Standardisation and voluntary notification (arts. 19-20)
Article 19 Standardisation
Article 20 Voluntary notification
Chapter VII Final provisions (arts. 21-27)
Article 21 Penalties
Article 22 Committee procedure
Article 23 Review
Article 24 Transitional measures
Article 25 Transposition
Article 26 Entry into force
Article 27 Addressees
Annex I Requirements and tasks of computer security incident response teams(CSIRTs)
Annex II Types of entities for the purposes of point (4) of Article 4
Annex III Types of digital services for the purposes of point (5) of Article 4
Done at
Next