(a)

Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) (Text with EEA relevance) · European Union

the seriousness of the infringement and the importance of the provisions breached, the following, inter alia, constituting serious infringement in any event: repeated violations; a failure to notify or remedy significant incidents; a failure to remedy deficiencies following binding instructions from competent authorities; the obstruction of audits or monitoring activities ordered by the competent authority following the finding of an infringement; providing false or grossly inaccurate information in relation to cybersecurity risk-management measures or reporting obligations laid down in Articles 21 and 23;

← art_32__para_7 · All articles · (i) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-27 · Text as adopted (Official Journal); later amendments are not incorporated in this text.