Checked on September 27, 2026
NIS2 in Iceland
How Iceland applies the NIS2 cybersecurity directive: the national law, who supervises, and how to register and report incidents.
NIS2 (Directive 2022/2555) has not been incorporated into the EEA Agreement (EFTA EEA-Lex: under scrutiny, no JCD), so it does not yet apply in Iceland. NIS1 is implemented by Act No. 78/2019 on the security of network and information systems of critical infrastructure; the government plans to implement NIS2 by amending that Act.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.