Luxembourg
(a) What is the NIS2 implementation status?
The NIS2 Directive has not yet been implemented. On 13 March 2024, a draft law (n°8364 – https://www.chd.lu/fr/dossier/8364) implementing the NIS2 Directive has been filed at the Luxembourg Parliament and is currently under discussion.
(b) What is the envisaged NIS2 implementation timeline?
18 October 2024 (provided that the law is implemented in due time).
(c) What does the NIS2 mean for other national cybersecurity legislation?
The NIS1 law will be revised as NIS2 replaces NIS1.
(d) Who will be the supervisory authority and how are they preparing the market?
The Luxembourg Institute of Regulation (the “ILR”) shall be the supervisory authority with respect to cybersecurity in Luxembourg. This authority should be the main contact regarding questions about preventive security measures and is primarily responsible for receiving notifications about security breaches with respect to critical infrastructures.
(e) What should you be doing/on the lookout for?
Now is the time to assess the applicability of NIS2 requirements.The ILR has launched a web page with Q&A on NIS2 (https://web.ilr.lu/FR/Professionnels/NISS/Directive-NIS2 ) and has started to give information sessions to professionals in its premises and online.
Contact
Hervé Wolff E: hw@lgavocats.lu
© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.
Share this page