Dáil Éireann Debate, Wednesday - 1 October 2025
113. Deputy Barry Ward asked the Minister for Justice, Home Affairs and Migration the reason the network and information security directive (NIS2 Directive) (EU) 2022/2555 was not transposed into Irish law by the October 2024 deadline. [52549/25]
View answerIn 2016 the first EU-wide law on cyber security, the NIS Directive, came into force achieving a higher, and more even level of security of network and information systems across the EU. The NIS Directive was reviewed in 2019 and its successor the NIS2 Directive entered into force in January 2023.
The transposition deadline for the NIS2 Directive was 17 October 2024, which unfortunately was not met. Ireland is not alone in this regard, many EU Member States have not met the transposition deadline, with the majority indicating that it will be sometime in 2025 before national legislation is in place. Ireland was not in a position to transpose the Directive into Irish law by the deadline primarily due to the complexity of the supervision and enforcement requirements.
The enactment of the Bill is a priority. Officials from my Department provided a briefing to the Joint Oireachtas Committee on Justice, Home Affairs and Migration to assist in the pre-legislative scrutiny process for the General Scheme of the Bill on 15 July 2025 and I look forward to the committee’s response.
My Department continues to work with the Office of Parliamentary Counsel (OPC) and the Attorney General’s Office on the drafting of the Bill, which is at an advanced stage. Engagement is also ongoing with the relevant Departments and Agencies in relation to the Bill. The Bill is included on the Government Legislation Programme for priority publication this session.
