Italy: Implemented European Delegation Law on NIS 2 Directive transposition (Law no. 15/24)

On 10 March 2024, the European Delegation Law on NIS 2 Directive transposition (Law no. 15/24) entered into force. The law delegates the government to adopt legislative decrees for the implementation and transposition of European Directive NIS 2 2022/2555. The law also outlines specific principles and guidelines for the implementation of Directive 2022/2555, including the identification of criteria for considering a public entity as a public administration for the application of the Directive's provisions. The law also confirms the distinction between the National Cybersecurity Agency as the competent national authority and sector authorities operating in the areas listed in Annexes I and II to the Directive. The law also introduces necessary changes to the existing legislation, including criminal law, to ensure the correct transposition of the Directive's provisions on coordinated vulnerability disclosure.