Austria to Implement NIS-2 via NISG 2026, Expanding Cybersecurity Obligations

Austria will replace its 2018 NIS law with the NISG 2026, effective October 1, 2026, transposing the EU NIS-2 directive. The new law significantly broadens the scope of affected companies, imposing stricter cybersecurity requirements. This marks a regulatory shift that will increase compliance burdens for Austrian firms and align national law with EU-wide standards.