NIS2 registration deadline is here. Have you made your assessment?
The 18 March 2025 deadline for NIS2 registrations is here. In this Law-Now, we want to remind any companies subject to the Belgian NIS2 legislation to register or to make sure they have assessed whether they fall within the extensive scope of NIS2.
1. What exactly is the NIS2 Directive, and am I subject to its rules?
You can read our earlier Law-Now to find out more about compliance with NIS2 and about conducting a scope assessment, or you can contact us via the methods below.
2. How can I register as a NIS2 entity?
NIS2 entities should register themselves on the Safeonweb@work platform operated by the Centre for Cybersecurity Belgium (CCB), the main Belgian NIS2 regulatory authority.
When registering, companies must provide the following information:
- Their name and Crossroads Bank for Enterprises (CBE) registration number or equivalent registration in the EU.
- Their current address and contact details, including email address, IP address ranges and telephone number.
- The relevant NIS2 sector referred to in annex I or II of the NIS2 Directive.
- Where applicable, a list of the Member States in which services subject to the NIS2 legislation are provided.
The CCB will, based on the information available to it as a federal government agency, proactively attempt to identify and approach entities that have not registered. It is important to note that entities that have not registered may be seen as violating the NIS2 law and may be risking appropriate administrative measures and fines.
If you wish to learn more about the NIS2 obligations, you will soon receive an invitation for our webinar discussing how companies can correctly and quickly assess which significant cyber incidents are notifiable under the Belgian NIS2 legislation. For a brief overview on this matter, we invite you to read our earlier Law-Now discussing the CCB guidelines.
