European Sovereignty Monitor

Policy and law

The Netherlands brings its NIS2 and CER transposition laws into force

The Cyberbeveiligingswet (NIS2) and Wet weerbaarheid kritieke entiteiten (CER) entered into force on 15 August with no transition period; about 8,000 organisations across 18 sectors must now register, manage cyber risk under board accountability and report significant incidents.

Verified Rijksoverheid press release, 15 August 2026

What it does not test. One member state's transposition; it establishes nothing about the other 26, and nothing about enforcement outcomes.

How this item counts. No movement: no answer to who owns, who operates, whose law governs or who made the parts changes. Weight 0. NIS2/CER now enforced in NL; national compliance duty, no own/operate/law/parts change. European Sovereignty Index

Previously in Policy and law

Verified ANSSI leads G7 call for urgent shift to post-quantum cryptography Reported EU Commission sends AI Act information requests to over 30 companies Reported EU antitrust officials seek information on Oracle's cloud licensing practices

All Policy and law news →