The DNSRF research team is monitoring the transposition of Article 28 of the NIS2 Directive across all EU member states. Below are the latest updates on the transposition of the NIS2 Directive into national laws. This information complements our continuously updated NIS2 Article 28 Tracker on our website, providing you with the most recent updates on open consultations and progress with national transposition efforts.

• Latvia: On June 20, 2024, the Latvian Saeima was transposed to the National Cyber Security Law. The law leaves all the details to secondary legislation and they held a public consultation from the 3 July- 17 July, 2024, in order to discuss some of this secondary legislation. Article 28 will be in secondary legislation too. 
• Germany: On June 26, 2024, Germany published an update draft bill to the NIS-2 Implementation and Cybersecurity Strengthening Act, which introduced some key updates and clarifications, including the removal of certain liability provisions for management. On July 22, 2024, this draft law was adopted by the Federal Government, largely unchanged.
• Austria: On 19 June 2024, the Parliament of Austria announced that Austria would the NIS2 Directive) into national law through the proposal to enact the Network and Information System Security Act 2024 (NISG 2024) and amend the Telecommunications Act and the Health Telematics Act (the bill). However, on 3 July 2024, the Austrian National Council (Nationalrat) declined to pass a federal act to transpose the NIS2 Directive.
• Italy: On June 10, 2024, the Italian Council of Ministers approved a draft legislative decree but it remains subject to amendments before it becomes law.