Where and by when must you register?
Every country keeps a list of essential and important entities. You register yourself. Several first deadlines have passed: register now if you are in scope and not on the list.
| Country | Portal | Deadline | You need | Report changes |
|---|---|---|---|---|
| Austria | Bundesamt für Cybersicherheit (electronic channel) | 2026-12-31 for entities in scope at the start; 3 months after you come into scope | Electronic filing over a secure channel set by the authority. Check the authority's announcements for the form. | 14 days |
| Belgium | Safeonweb@Work | By 2025-03-18 | Access to Safeonweb@Work for your organisation. | |
| Bulgaria | Register of the Minister of Innovation and Digital Transformation | The authority names you | Name, address, contact data, IP ranges, sector and type, and the Member States where you serve. Some providers send their EU establishment address within 2 months. | 14 days |
| Croatia | Electronic data submission to the competent authority | The authority names you | A contact person from the management body. Name this person and at least 2 authorised persons within 8 days of the request. | 14 days |
| Cyprus | Digital Security Authority list | As soon as you are in scope | Name, address and contact data, IP ranges, sector and sub-sector, and the Member States where you serve. This is sent when the Authority asks. | 14 days |
| Czechia | Portál NÚKIB | By 2025-12-31 | A login to the NÚKIB Portal. File the form "Ohlášení a správa regulované služby" in the section "Chci vyřídit". | 14 days |
| Denmark | Virk.dk NIS 2 registration form | 2025-10-01 for entities in scope at the start; 14 days after you come into scope | MitID Erhverv for the person who files. A foreign entity that cannot get a Danish digital signature can ask the authority for an exemption. | 14 days |
| Estonia | eesti.ee state portal, business view, Küberturvalisus e-service | 2026-04-01 for entities in scope at the start; 3 months after you come into scope | A board member of the company logs in to eesti.ee and files in the business view: E-teenused > Küberturvalisus. | 14 days |
| Finland | Traficom NIS2 entity list (e-service) | 2025-05-08 for entities in scope at the start; 1 month after you come into scope | Suomi.fi identification with the mandate "Kyberturvallisuuteen liittyvien toimijatietojen ilmoittaminen" for the organisation. | 14 days |
| France Bill, not law yet | MonEspaceNIS2 (pre-registration) | No legal deadline yet | Your entity details. The bill leaves the data to send and the change deadlines to a decree. | |
| Germany | BSI portal | 2026-03-06 for entities in scope at the start; 3 months after you come into scope | A MUK account (Mein Unternehmenskonto), which needs an ELSTER organisation certificate. Apply for the certificate early: it arrives by post. | 14 days |
| Greece | NIS2 self-registration platform | By 2025-09-30 | Login with the entity's credentials. The form asks for company name, tax number, GEMI number, address, legal representative, services, IP ranges, domain names and the ICT security officer. | 14 days |
| Hungary | SZTFH cybersecurity register | 30 days after you come into scope | The data set in section 29(1)(a) of the Act, sent to SZTFH. The SZTFH page does not name an online form. | 14 days |
| Ireland Bill, not law yet | NCSC NIS2 registration portal | No date set yet | Nothing yet. The NCSC says the portal opens after the legislation takes effect. | 14 days |
| Italy | ACN services portal | Every year, 01/01 to 02/28 (month/day) | A portal account for the company's point of contact. | |
| Latvia | NKDC status notification (official e-address) | 2025-04-01 for entities in scope at the start; 1 month after you come into scope | An official e-address (e-adrese) and a signed status-notification form. Send the form as an attachment to "Aizsardzības ministrija Nacionālais kiberdrošības centrs". | 14 days |
| Lithuania | KSIS (Cybersecurity Information System) of the NKSC | By 2025-04-17 | A KSIS account. Only the head of the company can fill in the account form. Then the entity files its data (activity, services, sector, size, revenue, IP addresses) in KSIS. | |
| Luxembourg | ILR self-registration form | By 2026-07-10 | The ILR online form. It asks for entity data, including entity size and group size. | 14 days |
| Malta | CIP Department national self-registration mechanism | As soon as you are in scope | Name, CSIRT provider, contact details, IP ranges, sector and sub-sector, and the Member States where you offer services. | 14 days |
| Netherlands | MijnNCSC | By 2026-08-15 | eHerkenning at level EH2+ linked to your KvK number, plus an authorisation to register for the organisation. | 14 days |
| Poland | Wykaz KSC (System S46) | 2026-10-03 for entities in scope at the start; 6 months after you come into scope | An account in the S46 system for the person who files for the company. | 14 days |
| Portugal | CNCS electronic platform (MyCiber) | 30 days after you come into scope | Log in through the legal representative with a Cartão de Cidadão or a Chave Móvel Digital. | |
| Romania | DNSC notification form (NIS2_RO) | 30 days after you come into scope | The NIS2_RO form in Romanian, saved as PDF and signed by the legal representative with a qualified electronic signature. | |
| Slovakia | NBU registration form (filed through the central government portal) | 60 days after you come into scope | An active electronic mailbox (elektronická schránka) and the NBU notification form, filed through the central public administration portal. | 14 days |
| Slovenia | URSIV self-registration form (ursiv.si) | 2025-12-19 for entities in scope at the start; 30 days after you come into scope | The URSIV digital form. Send the signed PDF and the CSV file by email to gp.uiv@gov.si. | 10 days |
| Spain Bill, not law yet | Control authorities | 3 months after you come into scope | Evaluate your own class, then send the control authority your name, contact data, IP ranges, sector and the EU states where you serve. A regulation will set the mechanism. | 14 days |
| Sweden | NCSC notification form | As soon as you are in scope | The NCSC notification form (organisation number, sector, essential or important class, internet identifiers such as IP addresses and domains). Your mail server must support TLS. | 14 days |
Before you register
- Confirm the class and the country with the scope checker.
- Get the login in time. Germany needs an ELSTER organisation certificate, which arrives by post. The Netherlands needs eHerkenning at level EH2+.
- Collect the data: legal name, address, contact for security matters, sectors and activities, the countries where you provide services, and your IP ranges where asked.
- Decide who keeps the entry up to date. Most countries ask for changes within 14 days.
One register or several?
- Each country where you are established
- Most entities.
- Main EU establishment only
- DNS providers, TLD registries, domain registrars, cloud, data centre, CDN, managed service and managed security service providers, and online marketplaces, search engines and social networks.