Austria: the NISG 2026 applies from 1 October 2026
Austria's NIS2 law has applied since 1 October 2026 to about 4,000 organisations. Registration, self-declaration and reporting deadlines at a glance.
Austria's transposition of NIS2, the Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), was published in the Federal Law Gazette on 23 December 2025 (BGBl. I Nr. 94/2025). Its main provisions apply from 1 October 2026, and the NISG 2018 lapsed on the same day.
Who is covered
According to the Austrian Economic Chamber (WKO), about 4,000 companies and organisations of medium size and above in 18 sectors fall under the law, as essential or important entities.
Key deadlines
- Registration: essential and important entities must register through the Unternehmensserviceportal (USP); the WKO gives 31 December 2026 as the deadline. The details of the form are set by regulation.
- Self-declaration: within twelve months after the registration duty begins, entities report the risk-management measures they have taken (the WKO gives 30 September 2027).
- Incident reporting: an early warning within 24 hours, a notification within 72 hours and a final report no later than one month after the early warning.
Fines
According to the WKO, fines can reach EUR 10 million or 2% of worldwide annual group turnover for essential entities, and EUR 7 million or 1.4% for important entities. Failing to register or to submit the self-declaration can cost up to EUR 50,000, or EUR 100,000 when repeated.
What to do now
- Confirm whether you are in scope and whether you are essential or important.
- Prepare the registration: company data, contacts reachable around the clock, and your sector and services.
- Start the gap analysis for the self-declaration: the measures follow Article 21 of NIS2.
- Set up an incident procedure that meets the 24-hour early warning.
Sources
- RIS: BGBl. I Nr. 94/2025, Netz- und Informationssystemsicherheitsgesetz 2026
- WKO: NIS2 overview (registration, self-declaration, reporting, fines)
- Directive (EU) 2022/2555 (NIS2)
For information only, not legal advice. Last updated 19 October 2026.
Also available in: Nederlands, Italiano, Deutsch, Français, Español, Polski, Português, Română, Čeština, Slovenčina, Dansk, Svenska, Norsk bokmål