In our previous blog post, we introduced the NIS2 Directive (Directive (EU) 2022/2555) as the EU’s landmark legislation for strengthening cybersecurity across Europe. We outlined its key features, the differences from NIS1, and provided an overview of the transposition progress in Belgium, the Netherlands, and Luxembourg. Since then, all three Benelux countries have completed their transposition with the Netherlands being most recent; the Dutch Cybersecurity Act (Cyberbeveiligingswet, “Cbw”) entered into force on 15 August 2026. Belgium and Luxembourg transposed the NIS2 Directive earlier, through the Belgium NIS2 law of 26 April 2024 (in force since 18 October 2024) and the Luxembourg NIS2 law of 5 May 2026 (in force since 10 May 2026).
08
Sep