Home › Data Protection & Digital › NIS Directive

NIS Directive In force since 6 July 2016

Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems
32016L1148 · official text on EUR-Lex

Articles

Chapter I GENERAL PROVISIONS

• Article 1 — Subject matter and scope
• Article 2 — Processing of personal data
• Article 3 — Minimum harmonisation
• Article 4 — Definitions
• Article 5 — Identification of operators of essential services
• Article 6 — Significant disruptive effect

Chapter II NATIONAL FRAMEWORKS ON THE SECURITY OF NETWORK AND INFORMATION SYSTEMS

• Article 7 — National strategy on the security of network and information systems
• Article 8 — National competent authorities and single point of contact
• Article 9 — Computer security incident response teams (CSIRTs)
• Article 10 — Cooperation at national level

Chapter III COOPERATION

• Article 11 — Cooperation Group
• Article 12 — CSIRTs network
• Article 13 — International cooperation

Chapter IV SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF OPERATORS OF ESSENTIAL SERVICES

• Article 14 — Security requirements and incident notification
• Article 15 — Implementation and enforcement

Chapter V SECURITY OF THE NETWORK AND INFORMATION SYSTEMS OF DIGITAL SERVICE PROVIDERS

• Article 16 — Security requirements and incident notification
• Article 17 — Implementation and enforcement
• Article 18 — Jurisdiction and territoriality

Chapter VI STANDARDISATION AND VOLUNTARY NOTIFICATION

• Article 19 — Standardisation
• Article 20 — Voluntary notification

Chapter VII FINAL PROVISIONS

• Article 21 — Penalties
• Article 22 — Committee procedure
• Article 23 — Review
• Article 24 — Transitional measures
• Article 25 — Transposition
• Article 26 — Entry into force
• Article 27 — Addressees