{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Houthoff","Thomas de Weerd"]
[null,null,"Marco Moeskops"]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Netherlands"]
["NIS2 Implementation Status"]
["Status","Ongoing"]
["Status of the NIS2 Implementation Act","On 21 May 2024, the Dutch government published a consultation document for the implementation legislation of the \nNIS2 Directive, the \nDutch Cybersecurity Act (\nCyberbeveiligingswet), which consultation period ended on 1 July 2024.\nIt is currently unknown when the \nDutch Cybersecurity Act will be submitted as a bill before the Dutch Parliament.\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive"," \n Closely modelled based on the NIS2 Directive. \n The scope has been extended to local governments (e.g. the provinces, municipalities and water boards) which have been assigned the status of essential entities. Educational institutions can be assigned the status of essential or important entities in individual cases based on a ministerial decree. \n Essential and important entities must report significant incidents to both the CSIRT and the competent authority (the relevant Ministry in that sector). \n Entities that are not important or essential can report incidents on a voluntary basis to a CSIRT. \n "]
["Expected date of entry into force of the Implementation Act","According to the most recent update of the Dutch government dated 16 October 2024, the government currently anticipates that the draft NIS2 implementation legislation will be submitted to the Dutch Parliament in the first quarter of 2025 and will come into force in the third quarter of 2025, contingent on the progress of the legislation process within the Dutch Parliament.\n"]