European Sovereignty Monitor

Policy and law

The Netherlands brings its NIS2 and CER transposition laws into force

The Cyberbeveiligingswet (NIS2) and Wet weerbaarheid kritieke entiteiten (CER) entered into force on 15 August with no transition period; about 8,000 organisations across 18 sectors must now register, manage cyber risk under board accountability and report significant incidents.

Verified Editor-read Rijksoverheid press release, 15 August 2026

What it does not test. One member state's transposition; it establishes nothing about the other 26, and nothing about enforcement outcomes.

How this item counts. No movement: no answer to who owns, who operates, whose law governs or who made the parts changes. Weight 0. NIS2/CER now enforced in NL; national compliance duty, no own/operate/law/parts change. European Sovereignty Index

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above; read and approved by the editor on 2026-08-15. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →