{"id":9020,"date":"2024-03-28T10:59:51","date_gmt":"2024-03-28T09:59:51","guid":{"rendered":"https:\/\/www.arcadsoftware.com\/dot\/?p=9020"},"modified":"2025-10-16T15:50:06","modified_gmt":"2025-10-16T13:50:06","slug":"the-nis-2-directive","status":"publish","type":"post","link":"https:\/\/www.arcadsoftware.com\/dot\/resources\/blog-en\/the-nis-2-directive\/","title":{"rendered":"The NIS 2 Directive"},"content":{"rendered":"

\"Banner<\/span><\/div><\/div><\/div><\/div><\/div>
<\/p>\n

The introduction of the NIS 2 Directive represents an essential response to the growing cyber threat. Published in December 2022, it offers a unique opportunity for entities that influence citizens' daily lives to strengthen their ability to protect themselves against cyber-attacks. By imposing preventive measures and assessing potential risks, this directive aims to secure infrastructures and minimize the impact of attacks. <\/p>\n<\/div><\/div><\/div>

Summary<\/b><\/p>\n

    \n
  1. What is the NIS 2 Directive? <\/a><\/li>\n
  2. Who is affected by NIS 2? <\/a><\/li>\n
  3. What are the obligations related to this directive? <\/a><\/li>\n
  4. What are the consequences and fines for non-compliance with the NIS 2 directive? <\/a><\/li>\n
  5. How can our DOT Anonymizer solution for anonymizing personal and identifying data help you comply with NIS 2? <\/a><\/li>\n
  6. Conclusion<\/a><\/li>\n<\/ol>\n<\/div><\/div><\/div>
    <\/div>

    1. What is the NIS 2 Directive?<\/h2><\/div>

    The NIS 2 Directive,<\/b> resulting from the previous NIS 1 Directive, constitutes a major change in the national and European cybersecurity landscape. <\/b>This development stems from the European Union's cybersecurity strategy, announced in December 2020, calling for the revision of the NIS Directive and the adoption of a new directive on the resilience of critical entities. It aims to unify cybersecurity practices across the European Union and broaden its scope to include a greater number of entities, covering a wider range of business sectors. <\/b><\/p>\n

    In the face of rapidly evolving cyber threats, this transition to NIS 2 is necessary to guarantee the EU's collective digital security.<\/b> The directive imposes obligations on operators of essential services and providers of digital services, and member states must identify operators subject to enhanced requirements. Transposing NIS 2 into member states' national law by October 2024 <\/b>represents a major challenge, but essential to strengthening resilience in the face of growing cyber threats. On January 17, 2025, member states must inform the European Commission of the rules and measures they have adopted.<\/p>\n<\/div>

    \"Key<\/span><\/div>
    <\/div>

    2. Who is affected by NIS 2?<\/h2><\/div>

    The NIS 2 directive defines more than 18 sectors concerned<\/b>, separated into critical and highly critical sectors. It will affect around 600 distinct types of entity, including a variety of administrations of all sizes<\/b>, as well as businesses ranging from SMEs to CAC40 groups. <\/p>\n

    It introduces several significant changes, including the expansion of the number of highly critical sectors from seven to eleven. <\/b>These sectors now include energy, transport, banking, financial market infrastructures, digital infrastructures, drinking water, wastewater, food (from production to delivery), healthcare, public administration, and space. <\/p>\n

    Digital infrastructures,<\/b> with their growing importance, cover a wide range of activities, including Internet service providers, DNS services, cloud solutions, data centers, content delivery services, trust services and public electronic communications networks. <\/p>\n

    Size criteria, such as number of employees or turnover, also determine the inclusion of entities in the directive. In addition, the directive covers almost all medium-sized and large companies operating in the EU internal market,<\/b> including those located outside the EU but essential to its market. <\/p>\n<\/div>