Who Needs NIS2
The NIS2 Directive affects over 12,000 organizations in Romania. Check if your organization is included.
Essential Entities (Annex I)
Fines up to 10 million EUR or 2% of global annual turnover
Energy
Electricity, oil, gas, hydrogen, district heating
Transport
Air, rail, maritime, road
Banking
Credit institutions, banks
Financial Markets
Financial market infrastructures
Health
Hospitals, laboratories, pharma, medical devices
Drinking Water
Drinking water suppliers and distributors
Wastewater
Wastewater management
Digital Infrastructure
IXP, DNS, TLD, cloud, data centers, CDN
ICT Services (B2B)
MSP, MSSP
Public Administration
Central government entities
Space
Space infrastructure
Important Entities (Annex II)
Fines up to 7 million EUR or 1.4% of global annual turnover
Postal Services
Postal and courier services
Waste Management
Collection, treatment, recycling
Chemicals
Production and distribution
Food Production
Food production and distribution
Manufacturing
Medical devices, electronics, machinery, vehicles
Digital Services
Marketplace, search engines, social networks
Research
Research organizations
Size Thresholds
Your organization falls under NIS2 if:
- 50+ employees OR
- Turnover > 10 million EUR OR
- Total balance sheet > 10 million EUR
Exceptions (regardless of size):
- Trust service providers
- Top-level domain (TLD) name registries
- DNS service providers
- Electronic communications network/service providers
- Public administration
- Sole providers of critical services
Sanctions Regime
Essential Entities
Minimum: 10,000 RON Maximum: 10 million EUR
or 2% of global annual turnover
Important Entities
Minimum: 5,000 RON Maximum: 7 million EUR
or 1.4% of global annual turnover
Personal liability of management (board/C-level). Mandatory training for leadership.
Not sure if your organization falls under NIS2?
Request a free assessment and find out as soon as possible if you are required to comply.
Check now