Glossary · NIS2
Important Entity
An organisation under NIS2 Annex I or II sectors that meets the medium-enterprise threshold without reaching essential-entity status.
Explained in depth: Who NIS2 applies to
Important entities are typically medium-sized organisations (50 to 249 employees, or turnover between EUR 10 million and EUR 50 million) in Annex I sectors, and both medium and large organisations in Annex II sectors. They must implement all ten Article 21 measures and follow the full Article 23 reporting timeline. The practical differences from essential entities are two: supervision is reactive, meaning the competent authority intervenes only when there is evidence or indication of non-compliance, and the penalty ceiling is lower, at least EUR 7 million or 1.4% of total worldwide annual turnover, whichever is higher.
Why it matters
"Important" does not mean "optional" or "lighter". Many mid-sized companies discover late that they are in scope. A misclassification in either direction leads to either compliance gaps or unnecessary cost.