NIS2 Directive delayed: What does this mean for Dutch companies?

The Dutch Ministry of Justice and Security has determined that they will not meet the European Commission's deadline for NIS2. That deadline is October 17, 2024. Although the European deadline remains the same, the national implementation date will be postponed. But what effect does this have on businesses? What can they already prepare?

The NIS2 Directive

The NIS2 directive comes into effect in the EU on October 17th, but each member state still needs to transpose it into its own national law. The Dutch government has indicated that transposing the directives into national legislation is taking more time than initially anticipated.

Currently, the Implementation Act, which specifies the compliance requirements, is lacking. An implementation deadline at the end of the year is achievable, but remains tight even with this postponement.

Impact on Businesses and Government Agencies

From October 17th, all companies must comply with a new law, but they do not yet know exactly how this will be implemented in the Netherlands. The Dutch government has not yet stated what the delay means. Dutch companies may not receive a postponement, even though the law is not yet entirely clear.

The fact that the effective date is not yet known should not be a reason for companies not to prepare. The NCSC (National Cyber Security Centre) also offers steps to help companies with their preparations and to become aware of the potential impact of the NIS2 directive on their activities and cybersecurity practices. Read more about what the NIS2 directive means for your company here.

NIS2 Directive: Start Preparing Now

The national government advises organizations not to wait until the law is fully clear. The risks exist now. If organizations take action now, they not only protect themselves against existing risks, but they are also better prepared for the new legislation.

The government advises every organization to take these measures to safeguard business processes. Part of these measures will also be mandatory in the new law. For organizations that must comply with the new law, it is important to start preparations in time. Implementing these measures takes time.

How do you prepare your organization for NIS2? Follow the NIS2 guideliness of the NCSC.