Tools · Deadline & pipeline radar
What’s moving
Imminent and upcoming milestones from the master timeline, plus proposals in the legislative pipeline.
Next deadlines
In the pipeline
- Digital Omnibus / Single Entry Point
Report-once Single Entry Point via ENISA for multi-regime incident notifications.
Ordinary legislative procedure (part of Digital Omnibus package)
Next: Council / Parliament consideration — SEP live ~18–24 months after adoption if adopted
- Cybersecurity Act 2 (CSA2)
Stronger ENISA, reformed certification, ICT supply-chain security.
Ordinary legislative procedure — COM(2026) 11
Next: Political agreement targeted for later 2026 (Commission aim); text will change
- NIS2 Targeted Amendments
Jurisdiction clarity, small mid-cap relief, SEP alignment, certification presumption.
Directive amending NIS2 — bundled with CSA2 package
Next: Trilogue / political agreement with CSA2; then 12-month national transposition once adopted
NIS2 transposition map
Status across 27 Member States — click through to authorities and CSIRTs.
- Transposed, in force
- Transposed, entry pending
- Transposed, commencement pending
- In legislative procedure
Coastlines: Natural Earth (public domain). Colours from this site’s NIS2 status data.