Here you can find the official text of EU NIS 2 Directive 2022/2555 – you can easily browse through the text by clicking through chapters and articles, or by searching for keywords in the left-hand side menu.

Chapter 1  –  General provisions

Article 1– Subject matter

Article 2– Scope

Article 3– Essential and important entities

Article 4– Sector-specific Union legal acts

Article 5– Minimum harmonisation

Article 6– Definitions

Chapter 2  –  Coordinated cybersecurity frameworks

Article 7– National cybersecurity strategy

Article 8– Competent authorities and single points of contact

Article 9– National cyber crisis management frameworks

Article 10– Computer security incident response teams (CSIRTs)

Article 11– Requirements, technical capabilities and tasks of CSIRTs

Article 12– Coordinated vulnerability disclosure and a European vulnerability database

Article 13– Cooperation at national level

Chapter 3  –  Cooperation at union and international level

Article 14– Cooperation Group

Article 15– CSIRTs network

Article 16– European cyber crisis liaison organisation network (EU-CyCLONe)

Article 17– International cooperation

Article 18– Report on the state of cybersecurity in the Union

Article 19– Peer reviews

Chapter 4  –  Cybersecurity risk-management measures and reporting obligations

Article 20– Governance

Article 21– Cybersecurity risk-management measures

Article 22– Union level coordinated security risk assessments of critical supply chains

Article 23– Reporting obligations

Article 24– Use of European cybersecurity certification schemes

Article 25– Standardisation

Chapter 5  –  Jurisdiction and registration

Article 26– Jurisdiction and territoriality

Article 27– Registry of entities

Article 28– Database of domain name registration data

Chapter 6  –  Information sharing

Article 29– Cybersecurity information-sharing arrangements

Article 30– Voluntary notification of relevant information

Chapter 7  –  Supervision and enforcement

Article 31– General aspects concerning supervision and enforcement

Article 32– Supervisory and enforcement measures in relation to essential entities

Article 33– Supervisory and enforcement measures in relation to important entities

Article 34– General conditions for imposing administrative fines on essential and important entities

Article 35– Infringements entailing a personal data breach

Article 36– Penalties

Article 37– Mutual assistance

Chapter 8  –  Delegated and implementing acts

Article 38– Exercise of the delegation

Article 39– Committee procedure

Chapter 9  –  Final provisions

Article 40– Review

Article 41– Transposition

Article 42– Amendment of Regulation (EU) No 910/2014

Article 43– Amendment of Directive (EU) 2018/1972

Article 44– Repeal

Article 45– Entry into force

Article 46– Addressees

Annexes  –  Annexes

Annex 1– Sectors of high criticality

Annex 2– Other critical sectors

Annex 3– Correlation table