Story perspectives

NIS2 Registration Starts as Compliance Delays Hit Firms

8/18/2026

Summary

Story summary

Operators of critical sectors must register with national cyber agencies under NIS2.
Delays have left many firms and advisers only now beginning compliance.
Lawyers cite chewing-gum wholesalers as an example of the law’s confusing scope.
France, Spain and Germany lag in NIS2 rollout, with Spain and France lacking cybersecurity laws, Germany’s registrations slow.
An anonymous European Commission official said the directive exempts small businesses and eases duties for less-critical organisations.

1 of 1

Story summary

Operators of critical sectors must register with national cyber agencies under NIS2.
Delays have left many firms and advisers only now beginning compliance.
Lawyers cite chewing-gum wholesalers as an example of the law’s confusing scope.
France, Spain and Germany lag in NIS2 rollout, with Spain and France lacking cybersecurity laws, Germany’s registrations slow.
An anonymous European Commission official said the directive exempts small businesses and eases duties for less-critical organisations.