Glossary · NIS2

Registration Requirement

The NIS2 duty for in-scope entities to identify themselves to the national authority with basic information about their organisation.

Explained in depth: Who NIS2 applies to

NIS2 requires member states to establish a list of essential and important entities, and entities must submit the information needed for it: name, address, contact details, the relevant sector and subsector, and the member states where they provide services. Certain digital-sector entities (DNS providers, TLD registries, cloud providers, and others) register additionally at EU level through a registry maintained by ENISA. Registration is self-service: no authority will tell you that you are in scope. Each entity must perform its own scoping assessment against the annexes and the size-cap rule and register with the mechanism its member state has set up, within the deadline the national law prescribes. Changes to the submitted information must be kept current.

Why it matters

Registration is typically the first hard deadline under national NIS2 laws and the easiest infringement for an authority to detect, since the absence of a registration is visible by definition. It is also the moment that forces the scoping question many organisations postpone.

Used in

See also

← All glossary terms