{
 "_nota": "Estado da transposição da Diretiva NIS2 (UE) 2022/2555 em cada Estado-Membro. Ficheiro MANUAL, mantido pelo autor: rever pelo menos uma vez por mês e atualizar «verificado» (AAAA-MM-DD). estado: em_vigor | aprovada (lei aprovada, ainda não em vigor) | em_preparacao. Datas AAAA-MM-DD (ou AAAA-MM); null = a fonte não indica. Cada país leva a ligação da fonte usada e a página da Comissão Europeia sobre esse país. Depois de editar: fazer push; a tarefa diária reconstrói o painel. Gaspar do Amaral · 27 out 2026 · com recurso a IA · © Aprecisa.com",
 "verificado": "2026-10-27",
 "prazo_diretiva": "2024-10-17",
 "fontes": [
  {
   "nome": "ECSO — NIS2 Directive Transposition Tracker (atualizado a 10/09/2026)",
   "url": "https://ecs-org.eu/nis2-tracker/"
  },
  {
   "nome": "nisd2.eu — NIS2 tracker (revisto a 16/10/2026)",
   "url": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker"
  },
  {
   "nome": "Comissão Europeia — transposição da NIS2 (página atualizada a 1/07/2025)",
   "url": "https://digital-strategy.ec.europa.eu/en/policies/nis-transposition"
  }
 ],
 "paises": [
  {
   "codigo": "AT",
   "pais": "Áustria",
   "estado": "em_vigor",
   "lei": "Network and Information System Security Act 2026 (NISG 2026)",
   "aprovada": "2025-12-23",
   "em_vigor_desde": "2026-10-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-austria",
   "nota": null
  },
  {
   "codigo": "BE",
   "pais": "Bélgica",
   "estado": "em_vigor",
   "lei": "Law of April 26, 2024 (cybersecurity of networks and information systems) + Royal Decree of June 9, 2024",
   "aprovada": "2024-04-26",
   "em_vigor_desde": "2024-10-18",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-belgium",
   "nota": null
  },
  {
   "codigo": "BG",
   "pais": "Bulgária",
   "estado": "em_vigor",
   "lei": "Lei nacional de transposição (o ECSO não indica o nome)",
   "aprovada": "2026-02-05",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-bulgaria",
   "nota": null
  },
  {
   "codigo": "HR",
   "pais": "Croácia",
   "estado": "em_vigor",
   "lei": "Regulation on Cybersecurity (designação usada pelo ECSO)",
   "aprovada": "2024-02-15",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-croatia",
   "nota": null
  },
  {
   "codigo": "CY",
   "pais": "Chipre",
   "estado": "em_vigor",
   "lei": "Security of Networks and Information Systems (Amendment) Law of 2025 (Law 60(I)/2025)",
   "aprovada": "2025-04-25",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-cyprus",
   "nota": null
  },
  {
   "codigo": "CZ",
   "pais": "Chéquia",
   "estado": "em_vigor",
   "lei": "Cybersecurity Act (Act No. 264/2025)",
   "aprovada": "2025-08-04",
   "em_vigor_desde": "2025-11-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-czech-republic",
   "nota": null
  },
  {
   "codigo": "DK",
   "pais": "Dinamarca",
   "estado": "em_vigor",
   "lei": "Law No. 434 — NIS 2 Act",
   "aprovada": "2025-05-06",
   "em_vigor_desde": "2025-07-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-denmark",
   "nota": null
  },
  {
   "codigo": "EE",
   "pais": "Estónia",
   "estado": "em_vigor",
   "lei": "Amendment of the Cybersecurity Act",
   "aprovada": "2025-12-30",
   "em_vigor_desde": "2026-01-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-estonia",
   "nota": null
  },
  {
   "codigo": "FI",
   "pais": "Finlândia",
   "estado": "em_vigor",
   "lei": "Cybersecurity Law",
   "aprovada": "2025-04-04",
   "em_vigor_desde": "2025-04-08",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-finland",
   "nota": null
  },
  {
   "codigo": "FR",
   "pais": "França",
   "estado": "em_preparacao",
   "lei": "Loi Résilience (junta NIS2, DORA e CER) — projeto de lei",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-france",
   "nota": "O debate foi retirado das sessões de 7 e 9 de outubro de 2026, sem nova data marcada (fonte: nisd2.eu)."
  },
  {
   "codigo": "DE",
   "pais": "Alemanha",
   "estado": "em_vigor",
   "lei": "Law implementing the NIS-2 Directive (NIS2UmsuCG)",
   "aprovada": "2025-12-05",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-germany",
   "nota": null
  },
  {
   "codigo": "GR",
   "pais": "Grécia",
   "estado": "em_vigor",
   "lei": "Law No. 5160/2024",
   "aprovada": "2024-11-27",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-greece",
   "nota": null
  },
  {
   "codigo": "HU",
   "pais": "Hungria",
   "estado": "em_vigor",
   "lei": "Act LXIX of 2024 on cybersecurity",
   "aprovada": "2024-12-20",
   "em_vigor_desde": "2025-01-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-hungary",
   "nota": null
  },
  {
   "codigo": "IE",
   "pais": "Irlanda",
   "estado": "em_preparacao",
   "lei": "National Cyber Security Bill — projeto de lei",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-ireland",
   "nota": "A Comissão Europeia levou o caso ao Tribunal de Justiça da UE a 8 de julho de 2026 (fonte: nisd2.eu)."
  },
  {
   "codigo": "IT",
   "pais": "Itália",
   "estado": "em_vigor",
   "lei": "Legislative Decree No. 138/2024",
   "aprovada": "2024-09-04",
   "em_vigor_desde": "2024-10-16",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-italy",
   "nota": null
  },
  {
   "codigo": "LV",
   "pais": "Letónia",
   "estado": "em_vigor",
   "lei": "National Cyber Security Act",
   "aprovada": "2024-06-20",
   "em_vigor_desde": "2024-09-01",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-latvia",
   "nota": null
  },
  {
   "codigo": "LT",
   "pais": "Lituânia",
   "estado": "em_vigor",
   "lei": "Law on Cybersecurity (XII-1428), alterada",
   "aprovada": "2024-07-11",
   "em_vigor_desde": "2024-10-18",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-lithuania",
   "nota": null
  },
  {
   "codigo": "LU",
   "pais": "Luxemburgo",
   "estado": "em_vigor",
   "lei": "Law of May 5, 2026 (high level of cybersecurity)",
   "aprovada": "2026-05-06",
   "em_vigor_desde": "2026-05-10",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-luxembourg",
   "nota": null
  },
  {
   "codigo": "MT",
   "pais": "Malta",
   "estado": "em_vigor",
   "lei": "Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order, 2025",
   "aprovada": "2025-04-08",
   "em_vigor_desde": null,
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-malta",
   "nota": null
  },
  {
   "codigo": "NL",
   "pais": "Países Baixos",
   "estado": "em_vigor",
   "lei": "Cyberbeveiligingswet (Cbw)",
   "aprovada": "2026-07-10",
   "em_vigor_desde": "2026-08-15",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-netherlands",
   "nota": null
  },
  {
   "codigo": "PL",
   "pais": "Polónia",
   "estado": "em_vigor",
   "lei": "Law Amending the Act on the National Cybersecurity System",
   "aprovada": "2026-03-02",
   "em_vigor_desde": "2026-04-02",
   "fonte": "https://ecs-org.eu/nis2-tracker/",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-poland",
   "nota": null
  },
  {
   "codigo": "PT",
   "pais": "Portugal",
   "estado": "em_vigor",
   "lei": "Decreto-Lei n.º 125/2025 (Regime Jurídico da Cibersegurança)",
   "aprovada": null,
   "em_vigor_desde": "2026-04-03",
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-portugal",
   "nota": "Autoridade nacional: Centro Nacional de Cibersegurança (CNCS)."
  },
  {
   "codigo": "RO",
   "pais": "Roménia",
   "estado": "em_vigor",
   "lei": "Emergency Ordinance No. 155/2024; Laws No. 52/2025 & No. 124/2025",
   "aprovada": "2024-12",
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-romania",
   "nota": null
  },
  {
   "codigo": "SK",
   "pais": "Eslováquia",
   "estado": "em_vigor",
   "lei": "Zákon o kybernetickej bezpečnosti (alteração)",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-slovakia",
   "nota": null
  },
  {
   "codigo": "SI",
   "pais": "Eslovénia",
   "estado": "em_vigor",
   "lei": "ZInfV-1 (Information Security Act)",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-slovenia",
   "nota": null
  },
  {
   "codigo": "ES",
   "pais": "Espanha",
   "estado": "em_preparacao",
   "lei": "Projeto de lei de coordenação e governação da cibersegurança — ainda sem lei publicada no BOE",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-spain",
   "nota": "A Comissão Europeia levou o caso ao Tribunal de Justiça da UE a 8 de julho de 2026 (fonte: nisd2.eu)."
  },
  {
   "codigo": "SE",
   "pais": "Suécia",
   "estado": "em_vigor",
   "lei": "Cybersäkerhetslagen (SFS 2025:1506)",
   "aprovada": null,
   "em_vigor_desde": null,
   "fonte": "https://nisd2.eu/en/wiki/timelines-and-status/nis2-eu-tracker",
   "comissao": "https://digital-strategy.ec.europa.eu/en/policies/nis-directive-sweden",
   "nota": null
  }
 ]
}