{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Arthur Cox","Colin Rooney"]
[null,null,"Vivian Spies"]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Ireland"]
["NIS2 Implementation Status"]
["Status","Ongoing"]
["Status of the NIS2 Implementation Act","The Irish Government published the General Scheme of the \nNational Cyber Security Bill 2024 (“\nGeneral Scheme”) on 30 August 2024. This Scheme will inform the drafting of the \nNational Cyber Security Bill. The \nNational Cyber Security Bill has not yet been published. The provisions contained within the \nGeneral Scheme are therefore subject to change.\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive"," The General Scheme is closely modeled on the NIS2 Directive , albeit with several local idiosyncrasies expected in transposition. Some of the more significant deviations include: \n \n Enforcement The General Scheme introduces processes for exercising enforcement powers that are not prescribed in the NIS2 Directive . It provides that the enforcement powers of the national competent authority are to be exercised by way of a ‘compliance notice’ that is served on the relevant essential/important entity. Certain Public Bodies (discussed below) and Public Administration Entities appear (although the drafting is unclear) to be exempt from enforcement actions and penalties. \n Sensor Employment The General Scheme provides that the NCSC may deploy sensors on essential and important entities, with their consent, where necessary to detect and manage risks to network and information security. \n Public Body The General Scheme introduces the concept of “public bodies“ which is distinct from the concept of a “public administration entity“. \n System of self-registration Head 31 of the General Scheme lists specific types of entities (TLD name registries, DNS service providers, domain name registration service providers, cloud computing service providers, data center service providers, content delivery network providers, managed service providers, managed security service providers, online marketplaces, online search engines and social networking platforms) that must self-register with the NCSC by submitting certain information to the NCSC by January 17, 2025. The General Scheme also provides that the NCSC must establish a list of essential and important entities by April 17, 2025, and that, in order to do this, the Minister shall require essential and important entities to submit certain details to the relevant competent authorities. \n "]
["Expected date of entry into force of the Implementation Act","As the \nCybersecurity Bill has yet to be published and go through the legislative process, the date on which final transposing legislation can be expected is not clear.\n"]