NIS2 Implementation in the EU |
|
Norway |
|
|
(Europe)
Firm
Advokatfirmaet Thommessen AS
Contributors
Axel Wik |
|
| Status of the legislative process | Ongoing |
| Status of the NIS2 Implementation Act | The NIS1 Directive was recently incorporated into Norwegian law by the Digital Security Act (Norwegian: digitalsikkerhetsloven), which entered into force on 1 October 2025. While the Norwegian Act primarily transposes NIS1, it also establishes certain requirements relating to incident notification, supervision and sanctions similar to those under NIS2. At present, Norway has not yet implemented the NIS2 Directive into national law. The Government has announced work on a consultation paper setting out the regulatory changes needed to implement the NIS2 Directive and the CER Directive into Norwegian law. Although the Government has stated that this work is a high priority, the precise timeline for implementation remains uncertain. |
| Significant deviations of the National Implementation Act from the NIS2 Directive, if any | Not applicable. |
| Date of entry into force of the Implementation Act | Not applicable. |
NIS2 Implementation in the EU
Ongoing
The NIS1 Directive was recently incorporated into Norwegian law by the Digital Security Act (Norwegian: digitalsikkerhetsloven), which entered into force on 1 October 2025.
While the Norwegian Act primarily transposes NIS1, it also establishes certain requirements relating to incident notification, supervision and sanctions similar to those under NIS2.
At present, Norway has not yet implemented the NIS2 Directive into national law. The Government has announced work on a consultation paper setting out the regulatory changes needed to implement the NIS2 Directive and the CER Directive into Norwegian law. Although the Government has stated that this work is a high priority, the precise timeline for implementation remains uncertain.
Not applicable.
Not applicable.