What are the NIS2 fines?
National laws must allow maximum fines of at least EUR 10 million or 2% of worldwide annual turnover for essential entities, and at least EUR 7 million or 1.4% for important entities. Article 34 of Directive (EU) 2022/2555 sets these figures, whichever amount is higher in each case. They are floors for the maximum, not the fine anyone will actually pay: national laws set the exact amounts, which breaches are fined and the procedure, and authorities weigh factors such as the seriousness and duration of the breach and the company's cooperation. Germany, for example, sets up to EUR 10 million or EUR 7 million in section 65 of the BSIG, rising to 2% or 1.4% of worldwide turnover for entities with a total turnover above EUR 500 million. Check your own country's law for the figures that apply to you.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.