{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Uría Menéndez","Leticia López-Lapuente"]
[null,null,"Martin Montilla Castile"]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 5/2/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Spain"]
["NIS2 Implementation Status"]
["Status","Ongoing"]
["Status of the NIS2 Implementation Act","The Spanish Ministry of Interior approved and published on 17 January 2025 the draft \nLaw on Cybersecurity Coordination and Governance (\nlink) which implements the \nNIS2 Directive. This is a draft not yet passed. As the deadline for transposing the \nNIS2 Directive expired on 17 October 2024, the Ministry of Interior decided to process this draft law through an urgent procedure. In any case, other ministries and public entities such as the Spanish Data Protection Authority or the Bank of Spain will issue their comments on the current version of the draft law, so the text may yet undergo changes.\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive"," Although it is still a draft law that may undergo changes, the current wording made public contains some deviations from the NIS2 Directive . For example, in a non-exhaustive manner: \n \n The Spanish draft law provides specific guidance about the appointment of the information security officer. \n The Spanish draft law includes “traceability” as a security aspect that may be affected by security incidents. In this regard, the NIS2 Directive includes “confidentiality”, “availability”, “authenticity” and “integrity”, but not “traceability”. \n "]
["Expected date of entry into force of the Implementation Act","Unclear. There is not a specific deadline foreseen for now, although the Ministry of Interior has decided to process it through an urgent procedure. \n"]