The NIS2 Directive now applies to designated IT suppliers to financial companies as appointed by the Danish FSA
Published 18 October 2024
Category: Financial Regulation
As of today, the NIS-2 Directive[1] (“NIS2”) applies to the most important IT suppliers to the financial sector.
While the implementation of NIS2 in general has been postponed to 2025 take effect in Denmark, the Danish Financial Supervisory Authority (the “Danish FSA”) was already in May 2024, with a new Chapter 19 c of the Financial Business Act, provided with the legal framework for supervision of the financial sector under the DORA Regulation[2] and NIS2.
The Danish FSA informs that they now have appointed a number of IT suppliers as operators of financial digital infrastructure to which NIS2 applies. The Danish FSA will publish which IT suppliers have been appointed when the appointments are final, i.e. when the companies’ appeal period has finally expired. The statement from the Danish FSA can be found here.
The purpose of NIS2 is to strengthen cybersecurity by setting requirements for financial companies’ IT security, their reporting of security incidents, and risk management. Find more information on the authority given to the Danish FSA pursuant to a new Chapter 19c of the Danish Financial Business Act on Mazanti Pulse.
NIS2 does not apply to financial undertakings covered by the DORA Regulation. For these companies, the DORA Regulation will instead apply from 17 January 2025.
[1] Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union.
[2] Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on Digital Operational Resilience for the financial sector, and
Also tagged ‘DORA’
The Danish FSA has published the designated IT suppliers to financial companies subject to NIS2 and under the supervision of the Danish FSA
The Danish FSA has appointed a number of IT suppliers as operators of financial digital infrastructure to which NIS2 applies.
CybersecurityDORANIS2The Danish FSAThe Danish implementation of a framework for supervision of the financial sector under The DORA Regulation and NIS2 Directive
On 2 May 2024, the Danish Parliament adopted an amendment to the Danish Financial Business Act to provide the Danish FSA with a legal framework for supervision of the financial sector under the DORA Regulation and the NIS-2 Directive.
DORANIS2Other updates
ESMA Launches Consultation Paper on selected KPIs under the Delegated Act under the Taxonomy Regulation
The consultation primarily focuses on the following three main topics: Revision of the OpEx KPI, Voluntary use of OpEx KPI by financial undertakings, and Group Taxonomy reporting.
ComplianceCSRDDisclosure RequirementsESRSSFDRSustainabilityEuropean Commission adopts final revised ESRS and voluntary sustainability reporting standards
The European Commission has adopted the final revised ESRS applicable to companies subject to the EU’s mandatory Corporate Sustainability Reporting Directive (“CSRD”) and a voluntary reporting standard for smaller companies.
ComplianceCSRDDisclosure RequirementsESRSSustainabilitySFDR 2.0 – Council agrees negotiating position
On 24 June 2026, the Council of the European Union agreed its negotiating position on the European Commission's proposal to amend the SFDR, introducing several important clarifications and amendments – including three new categories of financial products: sustainable, transition and ESG basics.
Disclosure RequirementsSFDRSustainabilityExpansion of the special section 7P regime enters into force
The Danish Ministry of Taxation and Economic Growth has announced that the expansion of the special regime for qualifying new and smaller companies in section 7P of the Danish Tax Assessment Act (ligningsloven) will enter into force on 1 July 2026.
Venture CapitalEU Commission presents proposal for EU Inc. (28th regime)
The initiative aims to address long-standing fragmentation across the EU’s 27 national company law systems by introducing a single, harmonised legal structure designed primarily for innovative companies and startups.
Venture CapitalPublication of Omnibus l
The Omnibus I Directive (Directive 2026/470) was published in the Official Journal of the European Union on 26 February 2026.
CSDDDCSRDSustainability