INDUSTRIES, TECHNOLOGY | NIS2 deadline to provide additional information to ACN extended

On 23 May 2025, the National Cybersecurity Agency (ACN) communicated an extension of the deadline – originally set for 31 May – for the submission of additional information pursuant to Article 7 of Legislative Decree No. 138 of 4 September 2024  (NIS Decree) which implements NIS2 Directive. The new deadline is 31 July 2025. According to the ACN, this extension applies to entities that had requested support in finalizing the annual update of their data prior to the original deadline. It is worth noting that various stakeholders have urged the ACN to clarify whether the extension may be interpreted as applying more broadly to all NIS entities, irrespective of whether a support request was submitted by 31 May. As of now, no official confirmation has been provided.

Newsletter n. 108 – June 2025