Published: 6 August 2026.
NIS2 does not apply to all companies, but to organisations providing services of importance to society and the economy. If you are not sure whether this applies to your company, here is what the law specifically says.
Which Sectors Are Covered
Covered sectors include:
- Energy
- Transport
- Banking
- Financial markets
- Healthcare
- Water management
- Telecommunications
- Digital infrastructure
- Cloud providers
- Data centres
- Public administration
- Postal services
- Waste management
- Food industry
- Chemical industry
- Certain manufacturing activities
- Research organisations
How Large a Company Must Be to Fall under NIS2
In most cases these are medium-sized and large organisations — at least 50 employees or EUR 10 million in turnover or assets. There are also exceptions for certain types of organisation (e.g. the sole provider of a key service, part of critical infrastructure, or public administration), which are covered regardless of size.
The Simplest Explanation
NIS2 applies to organisations whose operational disruption would have a significant impact on citizens or the economy.
Not sure whether this applies specifically to your company? Try the free NIS2 check — you get an indicative answer in two minutes based on your activity and company size.