National annexes for all 27 EU member states
Per-country NIS2 implementation status, competent authority, national CSIRT and
CDC-relevant notes. The table shows when each country was last reviewed; national situations
change, so treat "unverified" and "pending" flags seriously and open an issue
with corrections. Country facts are edited in one place,
countries.json, and python tools/build_countries.py
writes them into this table, the annexes and the regulatory selector.
One reviewer so far, none yet checked against primary sources. Every annex has been reviewed by the maintainer only, against authority websites and secondary sources. None is yet checked line by line against the official gazette or legal database itself; see the confidence levels below for exactly what each one means. Before you cite an annex to an auditor or regulator, check the date it was last reviewed and confirm the key facts against the official sources listed in it. Each annex opens with a status block showing its confidence level, whether it has been checked line by line against the legal text or reviewed by a lawyer, when it was last reviewed, by whom, and when the next review is due. Annexes are re-reviewed at least every six months. A second reviewer per country is the most useful contribution you can make; see CONTRIBUTING.
| Country | Status | Confidence | Last reviewed | Second reviewer | Next review | Annex |
|---|---|---|---|---|---|---|
| Austria | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Belgium | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Bulgaria | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Croatia | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Cyprus | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Czechia | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Denmark | In force | Maintainer reviewed | Sep 2026 | Wanted | Mar 2027 | Open |
| Estonia | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Finland | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| France | Pending, in the legislative process | Pending legislative change | Oct 2026 | Wanted | Apr 2027 | Open |
| Germany | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Greece | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Hungary | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Ireland | Pending, bill not yet published | Pending legislative change | Oct 2026 | Wanted | Apr 2027 | Open |
| Italy | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Latvia | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Lithuania | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Luxembourg | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Malta | In force | Needs verification | Oct 2026 | Wanted | Apr 2027 | Open |
| Netherlands | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Poland | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Portugal | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Romania | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Slovakia | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
| Slovenia | In force, secondary acts unverified | Needs verification | Oct 2026 | Wanted | Apr 2027 | Open |
| Spain | Pending, bill not yet in parliament | Pending legislative change | Oct 2026 | Wanted | Apr 2027 | Open |
| Sweden | In force | Maintainer reviewed | Oct 2026 | Wanted | Apr 2027 | Open |
Confidence levels
Each annex carries one of four confidence levels, so you can see how far to rely on it before citing it:
| Level | Meaning |
|---|---|
| Verified against primary source | Checked against the official gazette or legal database, with the source linked in the annex. |
| Maintainer reviewed | Checked by the maintainer against authority websites and secondary sources, but not yet line by line against the legal text. |
| Needs verification | Adopted, but key facts such as dates, secondary acts or completeness are unconfirmed. |
| Pending legislative change | The national law is not yet in force; expect the content to change. |
No annex is yet marked verified against primary source. Every one currently sits at maintainer-reviewed or below. None has been reviewed by a lawyer. Moving an annex up a level is a good first contribution.
Naming convention: annex-<ISO 3166-1 alpha-2>.md. Denmark is the reference
annex, the most detailed; help us bring your country's annex to the same depth.
Cross-EU context and reporting deadline tables: see the EU regulatory landscape and the interactive regulatory profile selector.