The Danish FSA has published the designated IT suppliers to financial companies subject to NIS2 and under the supervision of the Danish FSA

Published 27 November 2024

PrintCategory: Updates

The Danish FSA has appointed a number of IT suppliers as operators of financial digital infrastructure to which NIS2 applies. The details are available here (in Danish).

As of 18 October 2024, the NIS-2 directive[1] (“NIS2”) applies to the most important IT suppliers to the financial sector.

While the implementation of NIS2 in general has been postponed to 2025 take effect in Denmark, the Danish Financial Supervisory Authority (the “Danish FSA”) already in May 2024, with a new Chapter 19 c of the Financial Business Act, was provided with the legal framework for supervision of the financial sector under the DORA Regulation[2] and NIS2.

The designated IT suppliers are set out below:

  • JN Data A/S
  • FORENINGEN BANKDATA
  • SDC A/S
  • Bec Financial Technologies A.M.B.A.
  • e-nettet A/S
  • Mastercard Payment Services Denmark A/S

The purpose of NIS2 is to strengthen cybersecurity by setting requirements for financial companies’ IT security, their reporting of security incidents, and risk management. Find more information on the authority given to the Danish FSA pursuant to a new Chapter 19c of the Danish Financial Business Act on Mazanti Pulse.

NIS2 does not apply to financial undertakings covered by the DORA Regulation. For these companies, the DORA Regulation will instead apply from 17 January 2025.

[1] Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union.

[2] Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on Digital Operational Resilience for the financial sector, and

Tags:  CybersecurityDORANIS2The Danish FSA


Also tagged ‘Cybersecurity’

1 May 2025 Corporate RegulationOther Compliance RequirementsUpdates

The Danish Parliament has adopted regulation to implement the NIS2 Directive and the CER Directive

On April 29, 2025, on the day where major parts of France, Spain, and Portugal suffered severe utility breakdowns, the Danish Parliament adopted the bills for implementing the NIS2 Directive and the CER Directive.

CERCritical SectorsCybersecurityNIS2
7 Feb 2025 Updates

The Danish government has presented bills for implementing the NIS2 Directive and the CER Directive

On 6 February 2025, the bills for implementing the NIS2 Directive and the CER Directive were presented by the Danish government to the Danish Parliament.

CERCybersecurityNIS2

Other updates

19 Jan 2026 Corporate Regulation

EU political agreement on strengthened FDI screening framework

The initiative forms part of the EU’s wider economic security agenda and seeks to reduce fragmentation between national screening regimes while strengthening the protection of security and public order.

Cross-BorderDanish Regulation
8 Jan 2026 AIFs

IPEV publishes 2025 Valuation Guidelines

The IPEV Board has published the 2025 edition of the International Private Equity and Venture Capital Valuation Guidelines, which supersede the 2022 edition.

Valuation
16 Dec 2025 Impact and ESG

The Danish FSA has aligned its practices with the ESMA guidelines on funds’ names

The Danish FSA has announced that it will adjust its supervisory practices on fund names to align with European guidelines.

SustainabilityThe Danish FSA
3 Dec 2025 Impact and ESG

Invest Europe has published the 2025 ESG reporting template

This voluntary template aims to standardize the collection of data and investor reporting on ESG matters on GP, fund and portfolio company level.

CSRDSFDR
28 Nov 2025 Impact and ESG

SFDR 2.0 proposal

The European Commission has proposed amendments to the SFDR (the “Proposal”), introducing major changes to the current framework.

Disclosure RequirementsSFDRSustainability