Product and sector laws Required
Decide whether NIS2 covers you
Decide whether the NIS2 Directive covers you from your sector and size, record the decision, and register with the national authority when it does.
How to do it
NIS2, Directive (EU) 2022/2555, covers medium and large firms in the sectors of its Annexes I and II. Digital ones include cloud computing, data centres, content delivery networks and managed IT or security services for businesses. Online marketplaces, search engines and social networks count too. DNS providers, top-level domain registries and trust services are covered at any size. Compute the size test with the facts rule. Each EU country writes NIS2 into its own law, so read the national act of every country where you are established. Cloud, DNS and similar digital providers are supervised where their main establishment is.
How to check
The obligations register has a NIS2 entry computed from the facts file. When it applies, the entry holds the authority's registration reference and date.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers compliance playbook: https://agentwranglers.se/playbook/compliance/product-and-sector-laws/nis2-scope.