On 14 December 2022, the European Parliament adopted Directive 2022/2555, known as ‘NIS 2’. The aim of this directive is to respond to an increase in the volume and sophistication of cyber-attacks, which calls for an overall increase in the level of cybersecurity within the European Union.
The NIS 1 Directive covered almost 600 essential entities. The NIS 2 Directive covers a much wider area, with more than 15,000 entities considered essential or important, all of which are part of highly critical or critical sectors.
Following the dissolution of the French Assemblée Nationale on 9 June 2024, the examination by the Council of Ministers of the Bill to transpose the NIS 2 Directive has been postponed. Given that the deadline for transposition of the Directive was set on the 17 October 2024, the transposition will be late.
It should be remembered that the deadline for stakeholders to comply with the measures in the Directive, through the French law transposing the Directive, is 31 December 2027. In view of the many obligations set out in the Directive and the wide range of players involved, it will become increasingly urgent to know the precise provisions transposing the NIS 2 Directive, as the 31 December 2027 date approaches. This is all the more true in the case of large entities and/or those for which the time needed to comply can be expected to be long.
On 3 October 2024, the French Commission Supérieure du Numérique et des Postes (CSNP) issued a notice containing 32 recommendations for the future transposition of the NIS 2 Directive. One of the CSNP’s recommendations was to ‘specify in law the scope of Article 28 of the NIS 2 Directive relating to the domain name registration database’.
All those involved, including IP Twins in its capacity as a registrar, hope that the next few weeks will give us a clearer idea of the future shape of the transposition law.
In the meantime, our teams are at your disposal to discuss the many measures we have in place to ensure the security and resilience of the services we offer.
To find out more:
Notice of the CSNP of 3 October 2024
Notice of the CSNP of 21 may 2024
