EU regulatory register · NIS2
Article 5Minimum harmonisation
CELEX 32022L2555 · Read on 2026-08-18 · Chapter I
Short answer
This Directive shall not preclude Member States from adopting or maintaining provisions ensuring a higher level of cybersecurity, provided that such provisions are consistent with Member States’ obligations laid down in Union law.
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-5 · Short answer as data · Official text
NIS2, cybersecurity in short
Essential and important entities must take security measures, report significant incidents within 24 hours, and management is personally accountable.
- Are we covered by NIS2?
- What is management's responsibility under NIS2?
- Does NIS2 or DORA apply to financial entities?
Source: NovaCopilot
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
This Directive shall not preclude Member States from adopting or maintaining provisions ensuring a higher level of cybersecurity, provided that such provisions are consistent with Member States’ obligations laid down in Union law.
Follow-up questions
Other articles in this chapter
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit