NISDESK · RO
NIS2 Compliance in Romania
Romanian organisations in Annex I and II sectors must register with DNSC and fulfil incident-reporting obligations within the 72-hour NIS2 window.
Are you in scope?
NIS2 covers medium and large organisations in 18 sectors. Fines reach €10M or 2% of global turnover. Check your scope, obligations and a readiness score for free.
National authority & CSIRT
In Romania, NIS2 supervision is handled by DNSC (Directoratul Național de Securitate Cibernetică). The national CSIRT is DNSC-CERT. Significant incidents must be reported within 24 h (early warning), 72 h (notification) and one month (final report) per NIS2 Article 23.
NIS2 sectors in Romania
Each sector has specific obligations. Explore them for Romania:
Frequently asked questions
Which sectors are covered by NIS2 in Romania?
NIS2 covers 18 sectors: Annex I (highly critical — energy, transport, banking, financial markets, health, water, digital infrastructure, ICT service management, public administration, space) and Annex II (other critical — postal services, waste management, chemicals, food, manufacturing, digital providers, research). Transposed via Law 58/2023; DNSC is both the competent authority and national CSIRT for NIS2.
Who supervises NIS2 compliance in Romania?
In Romania, the primary competent authority is DNSC (Directoratul Național de Securitate Cibernetică). The national CSIRT is DNSC-CERT, which handles significant incident notifications and cybersecurity coordination.
What are the NIS2 incident reporting deadlines in Romania?
Organisations must submit an early warning to DNSC-CERT within 24 hours of a significant incident, a formal notification within 72 hours, and a final report within one month — per NIS2 Article 23.
What are the NIS2 fines in Romania?
Essential entities face fines up to €10 million or 2% of global annual turnover. Important entities face up to €7 million or 1.4% of global annual turnover. Exact enforcement varies by national transposition.
For decision-support purposes only. Exact scope depends on national transposition — use our free scope checker for a personalised assessment.