Easing the NIS2 Burden: Targeted Reforms to Europe’s Cybersecurity Rules

The European Commission has proposed targeted amendments to the NIS2 Directive (Directive (EU) 2022/2555 – NIS2) that would narrow the Directive’s scope, recalibrate supervisory intensity, and introduce elements of maximum harmonization – without materially altering the core cybersecurity risk-management obligations. The proposal was published in January 2026 and will now go through the EU legislative process.... By: Morrison & Foerster LLP