NIS2 requires a higher level of cyber security coordination of both physical infrastructures and online digital services. The extraterritorial aspect only applies to online services consisting of: Domain Name Registration (DNS) and Top Level Domain (TLD) services, cloud computing, data centre services, content distribution networks (CDN), ICT service management (including security), online marketplace, online search engine or social networking services platform. Businesses offering services to multiple EU countries can appoint a single rep, preferably where most users are.
If this sounds like you, NIS2 reps have been mandatory since 17 January 2025.
