NIS2 · National implementation
NIS2 in Denmark
Denmark transposed NIS2 through Lov nr. 434 af 6. maj 2025 (the NIS 2 Act), in force since 1 July 2025.
- National law
- Lov nr. 434 af 6. maj 2025
- NIS 2 Act
- Status
- In force
- In force
- 1 July 2025
- Authority
- Center for Cybersikkerhed (CFCS)
Supervision
The Center for Cybersikkerhed (CFCS) is the central authority and national CSIRT, with sector authorities supervising their own domains (for example energy and finance keep sector regulators).
What is specific to Denmark
Denmark legislated NIS2 and CER in parallel acts, and several sectors (notably energy and telecoms) had Danish security regulation predating NIS2 that remains layered on top. The Danish act empowers ministers to issue sector-specific executive orders (bekendtgørelser), so Danish entities must track both the act and their sector's orders — the operative detail lives in the orders.
Official sources
Primary references: the national statute book at www.retsinformation.dk and the national cybersecurity authority at www.cfcs.dk.
NIS2 in Denmark: frequently asked questions
Last reviewed:
Related reading
Definitions