The Bottom Line: More than one-third of affected companies have failed to meet the registration deadline for the NIS2 Directive.
Around 38.5 percent of companies have failed to comply with the registration deadline for the NIS2 Directive. This undermines the implementation of cybersecurity requirements in the EU.
The survey shows that 38.5 percent of surveyed firms missed the registration deadline for the NIS2 Directive (Network and Information Systems Directive 2). The NIS2 Directive imposes strict reporting deadlines for operators of critical infrastructure and important digital service providers in order to harmonize cybersecurity standards across the EU.
For compliance officers, this high failure rate presents significant legal consequences. Late or missing registrations can result in fines, enhanced audits, and reputational damage. Additionally, a backlog develops at regulatory authorities, which delays processing of further applications.
Companies that have not yet registered should immediately contact their competent authority and complete the registration process. Comprehensive documentation of compliance measures undertaken to date, even if submitted late, can help mitigate additional sanctions.
Source: news.google.com · Published June 3, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification via Lumi News Pipeline v1.6.2.