NIS2 fines in Denmark go through criminal courts, not admin decisions. Up to €10M or 2% for essential entities. Board liability only at gross negligence. CFCS, Energistyrelsen, Finanstilsynet mapped.
Kyberturvallisuuslaki in force since April 2025: 5,500 Finnish organisations face Traficom’s NIS2 framework and €10M penalties.
~6,000 Danish organisations now in NIS2 scope. How Virk.dk single-entry registration works, what CFCS enforces, and the 10 Article 21 measures Cybersikkerhedsloven requires.
The CBW passed the Dutch House on 15 April 2026 but is not yet in force. Map the three-tier fine structure, 6 sector supervisors, DORA carve-out, and the enforcement gap before the royal decree lands.
Belgium’s NIS2 fines reach €10M or 2% of revenue for essential entities. The CCB enforces through 8 escalating measures, up to court-ordered suspension of management functions.
CCB combines CERT.be, CyTRIS, NCCA, and NCC-BE — here’s which unit handles your NIS2 obligations and what to do before Belgium’s April 2026 deadline.
CBW enters force Q2 2026: three legal obligations for Dutch organisations. Register on mijn.ncsc.nl, meet reporting timelines, and find which of five sector regulators supervises your organisation.
NCSC-NL coordinates, but your compliance audits come from RDI, DNB, IGJ, or ILT depending on your sector. Map your Dutch NIS2 supervisor before July 2026.
Belgium’s CCB uses a 3-tier CyberFundamentals scheme to enforce NIS2. What the Basic, Important and Essential levels require — and the April 2026 deadline that makes this urgent.
WannaCry, NotPetya, SolarWinds, Colonial Pipeline, Viasat — each attack exposed a gap. Each gap became a NIS2 article. Here is the legislative paper trail.
