My favourites

Chapter IX – Final provisions (Art. 40-46)

Art. 40 NIS2 - Review arrow_right_alt

By 17 October 2027 and every 36 months thereafter, the Commission shall review the functioning of this Directive, and report to the European Parliament and to the Council. The report shall in particular assess the relevance of the size of the entities concerned, and the sectors, subsectors and types of entity referred to in Annexes I and II for the functioning of the economy and society in relation to cybersecurity. To that end and with a view to further advancing the strategic and operational cooperation, the Commission shall take into account the reports of the Cooperation Group and the CSIRTs network on the experience gained at a strategic and operational level. The report shall be accompanied, where necessary, by a legislative proposal.

Related
Close tabsclose
  • 140

Recital 140

The Commission should periodically review this Directive, after consulting stakeholders, in particular with a view to determining whether it is appropriate to propose amendments in light of changes to societal, political, technological or market conditions. As part of those reviews, the Commission should assess the relevance of the size of the entities concerned, and the sectors, subsectors and types of entity referred to in the annexes to this Directive for the functioning of the economy and society in relation to cybersecurity. The Commission should assess, inter alia, whether providers, falling within the scope of this Directive, that are designated as very large online platforms within the meaning of Article 33 of Regulation (EU) 2022/2065 of the European Parliament and of the Council (1) could be identified as essential entities under this Directive.


(2) Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market For Digital Services and amending Directive 2000/31/EC (Digital Services Act) (OJ L 277, 27.10.2022, p. 1).

Art. 41 NIS2 - Transposition arrow_right_alt

Art. 42 NIS2 - Amendment of Regulation (EU) No 910/2014 arrow_right_alt

Art. 43 NIS2 - Amendment of Directive (EU) 2018/1972 arrow_right_alt

Art. 44 NIS2 - Repeal arrow_right_alt

Art. 45 NIS2 - Entry into force arrow_right_alt

Art. 46 NIS2 - Addressees arrow_right_alt