Which sectors does NIS2 cover?

Eighteen sectors in two annexes. Annex I, the sectors of high criticality, covers energy, transport, banking, financial market infrastructures, health, drinking water, waste water, digital infrastructure, ICT service management for business customers (managed service and managed security service providers), public administration and space. Annex II, other critical sectors, covers postal and courier services, waste management, chemicals, food production and distribution, manufacturing (medical devices; computers, electronic and optical products; electrical equipment; machinery; motor vehicles; other transport equipment), digital providers (online marketplaces, search engines and social networks) and research. Each sector is divided into types of entity, so read the exact wording for your activity, not just the sector name. Size thresholds and national choices then decide whether a particular company is in scope.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

Read next

← All 40 questions on NIS2 scope and dutiesAll topics