Everything you need to know about the NIS2 directive


Ihmiset Osaaminen Palvelut Rahoitusoikeus Kilpailuoikeus, Kauppa ja Ulkomaiset Investoinnit Rakentaminen Yrityskauppapalvelut Yritysrikokset Tietosuoja, tietoturva ja teknologia Työoikeus Rahoituspalvelujen sääntely Heinonen Vakuutusoikeus Immateriaalioikeudet Riidanratkaisu Yksityishenkilöjuridiikka Kiinteistöt Sopimusoikeus Vero-oikeus Toimialat Kuluttajapalvelut Kuluttajapalvelut Luxury Energia Energia Hydrogen Rahoitus Julkissektori Teollisuus Terveysteknologia ja terveydenhuolto Kiinteistöt Teknologia, media ja telekommunikaatio Teknologia, media ja telekommunikaatio Digital Infrastructure Ajankohtaista Julkaisut Asiakastyökalut Tapahtumat ja koulutukset Puheenaiheet Yritys Meistä Firm leadership Arvot Responsible business Yhteisö Monimuotoisuus ja osallisuus Ympäristövastuu Pro bono Reports Uutiset Urapolku Ura Hakemukset Miksi valita meidät? Juristit ja osakkaat Hallinnon ammattilaiset Opiskelijat ja vastavalmistuneet Toimistot Suomi Kansainväliselle sivustolle Valitse paikallinen sivusto Aasia Alankomaat Angola Arabiemiirikunnat Belgia Bulgaria Espanja Etelä-Afrikka Globaali Irak Irlanti Iso-Britannia Italia Itävalta Jordania Latvia Liettua Luxemburg Mauritius Mosambik Portugali Puola Qatar Ranska Romania Ruotsi Saksa Saudi-Arabia Slovakia Suomi Sveitsi Tšekki Tunisia Unkari Viro Yhdysvallat Muu maailma fi Valikko English Everything you need to know about the NIS2 directive Etusivu Ajankohtaista Julkaisut Etusivu Ajankohtaista Julkaisut Everything you need to know about the NIS2 directive Everything you need to know about the NIS2 directive 15. kesäkuuta 2023 Alankomaat Alankomaat Alankomaat The NIS2 Directive, also known as the new version of the Network and Information Security Directive, is a European directive aimed at strengthening cybersecurity in the European Union (EU). The Directive is designed to help organizations protect themselves against cyber threats and to ensure that the EU’s cyber infrastructure is more secure and robust. Now that the directive has been finally officially published, member states have 21 months - ie until 17 October 2024 - to integrate the provisions of the directive into local legislation. In this white paper we will give an overview of the most important provisions of the NIS2 directive and how they apply to organizations in the EU. We will also discuss the obligations that organizations have to comply with the directive and how we, ESET Netherlands and Eversheds Sutherland, can support this. We hope this white paper will be useful for organizations looking to learn more about how to protect themselves against cyberthreats and how to comply with the NIS2 directive. Contents What is the NIS2 directive? - 4 What can we expect from the NIS2? - 9 What will the NIS2 mean for your organization? - 11 Need help with the implementation of NIS2? - 20 Key contacts - 21 Sources - 22 Download this article as a PDF Eversheds Sutherland takes all reasonable care to ensure that the materials, information and documents, including but not limited to articles, newsletters, reports and blogs (""Materials"") on the Eversheds Sutherland website are accurate and complete. However, the Materials are provided for general information purposes only, not for the purpose of providing legal advice, and do not necessarily reflect the present law or regulations. The Materials should not be construed as legal advice on any matter. The Materials may not reflect the most current legal developments. The content and interpretation of the Materials and the law addressed in the Materials are subject to revision. No representation or warranty, express or implied, is made as to the accuracy or completeness of the Materials and therefore the Materials should not be relied upon. Eversheds Sutherland disclaims all liability in respect of actions taken or not taken based on any or all of the contents of the Materials to the fullest extent permitted by law. The Materials are not intended to be comprehensive or to include advice on which you may rely. You should always consult a suitably qualified Lawyer/Attorney on any specific legal matter. Any views expressed through the Materials are the views of the individual author and may not reflect the views of Eversheds Sutherland or any other individual Lawyer/Attorney. Pinnalla / Puheenaiheet NIS2 Directive Yhteyshenkilöt Olaf van Haperen Partner Rotterdam, Netherlands Robbert Santifort Partner Rotterdam, Netherlands Uusimmat Artikkelit legal updates Consumer Lens - Session 1 \| The Rise of European Class Actions podcasts and webcasts Tax NOLs in Cross-Border Structures Webinar legal updates EU Pay Transparency Directive legal updates Trade secrets and the Digital Omnibus: key risks and safeguards Uusimmat Uutiset asiakasuutiset Next stop, public ownership: Eversheds Sutherland advises DfT on GTR transition toimistomme uutiset Eversheds Sutherland strengthens restructuring offering with senior partner appointment toimistomme uutiset Eversheds Sutherland strengthens Commercial Advisory practice with technology partner hire asiakasuutiset Eversheds Sutherland advises Schroders Greencoat on acquisition of Dutch biomethane platform Uusimmat Tapahtumat ja koulutukset etätapahtuma \| June 09, 2026 UK employment law training etätapahtuma \| June 16, 2026 Nordic (Denmark, Finland, Norway and Sweden) employment law training etätapahtuma \| June 23, 2026 Introduction to Swiss employment law etätapahtuma \| September 10, 2026 UAE - Employment law in the Dubai International Financial Centre Tabs Label legal updates 29. toukokuuta 2026 Consumer Lens - Session 1 \| The Rise of European Class Actions podcasts and webcasts 29. toukokuuta 2026 Tax NOLs in Cross-Border Structures Webinar legal updates 28. toukokuuta 2026 EU Pay Transparency Directive legal updates 27. toukokuuta 2026 Trade secrets and the Digital Omnibus: key risks and safeguards Lailliset huomautukset Käyttöehdot Tietosuojaseloste Evästekäytäntö Etämyynti Whistleblowing LinkedIn YouTube Sosiaalinen media Ota yhteyttä Kirjaudu asiakkaana Kirjaudu työntekijänä Tilaa Yritys Yritys Tavoitteet ja arvot Vastuullisuus Alumni Julkaisut Asiakastyökalut Tapahtumat ja koulutukset Puheenaiheet Urapolku Sivustokartta Toimistot © Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website.

The NIS2 Directive, also known as the new version of the Network and Information Security Directive, is a European directive aimed at strengthening cybersecurity in the European Union (EU).

The Directive is designed to help organizations protect themselves against cyber threats and to ensure that the EU’s cyber infrastructure is more secure and robust. Now that the directive has been finally officially published, member states have 21 months - ie until 17 October 2024 - to integrate the provisions of the directive into local legislation. In this white paper we will give an overview of the most important provisions of the NIS2 directive and how they apply to organizations in the EU. We will also discuss the obligations that organizations have to comply with the directive and how we, ESET Netherlands and Eversheds Sutherland, can support this. We hope this white paper will be useful for organizations looking to learn more about how to protect themselves against cyberthreats and how to comply with the NIS2 directive.

Contents

What is the NIS2 directive? - 4
What can we expect from the NIS2? - 9
What will the NIS2 mean for your organization? - 11
Need help with the implementation of NIS2? - 20
Key contacts - 21
Sources - 22

Download this article as a PDF

Eversheds Sutherland takes all reasonable care to ensure that the materials, information and documents, including but not limited to articles, newsletters, reports and blogs (""Materials"") on the Eversheds Sutherland website are accurate and complete. However, the Materials are provided for general information purposes only, not for the purpose of providing legal advice, and do not necessarily reflect the present law or regulations. The Materials should not be construed as legal advice on any matter.

The Materials may not reflect the most current legal developments. The content and interpretation of the Materials and the law addressed in the Materials are subject to revision.

No representation or warranty, express or implied, is made as to the accuracy or completeness of the Materials and therefore the Materials should not be relied upon. Eversheds Sutherland disclaims all liability in respect of actions taken or not taken based on any or all of the contents of the Materials to the fullest extent permitted by law. The Materials are not intended to be comprehensive or to include advice on which you may rely. You should always consult a suitably qualified Lawyer/Attorney on any specific legal matter.

Any views expressed through the Materials are the views of the individual author and may not reflect the views of Eversheds Sutherland or any other individual Lawyer/Attorney.