NIS2 Implementation in the EU |
|
Denmark |
|
|
(Europe)
Firm
Kromann Reumert
Contributors
Christel Teglers |
|
| Status | Enacted and (partially) ongoing |
| Status of the NIS2 Implementation Act | The NIS2 Implementation Act is implemented into Danish law by several sector-specific laws:
|
| If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive | We expect that the sector-specific regulations for the energy and telco sectors will be higher than those of the minimum requirements of the NIS2 Directive. |
| Expected date of entry into force of the Implementation Act | 7 March - 1 July 2025 |
NIS2 Implementation in the EU
Status
Enacted and (partially) ongoing
Status of the NIS2 Implementation Act
The NIS2 Implementation Act is implemented into Danish law by several sector-specific laws:
- One main bill for the energy sector (implementing NIS2 and CER). This bill was presented in the Parliament Chamber on 4 December 2024 and is expected to enter into force on 7 March 2025. The Danish NIS2 bill for the energy sector will be supplemented by (at least) three Ministerial Orders that detail and describe the requirements for organizational resilience, physical security, cybersecurity, personnel approvals, incident reporting and supply chain security, amongst others.
- One main bill for the telco sector (implementing NIS2). This bill was presented in the Parliament Chamber on 6 February 2025 and is expected to enter into force on 1 July 2025.
- Two bills for the remaining other sectors, ex-finance, energy, and telco, (implementing NIS2 and CER). These bills were also presented in the Parliament Chamber on 6 February 2025 and are expected to enter into force on 1 July 2025. The bills will be supplemented by one or more Ministerial Orders and guidelines.
- Changes to the Danish Financial Business Act for certain IT providers (subject to the NIS2 Implementation Act) to the financial sector (subject to DORA), which entered into force on 18 October 2024.
If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive
We expect that the sector-specific regulations for the energy and telco sectors will be higher than those of the minimum requirements of the NIS2 Directive.
Expected date of entry into force of the Implementation Act
7 March - 1 July 2025