NIS2 in Luxembourg
Competent authority: HCPN + CIRCL. Transposition vehicle: National law.
Notable: Luxembourg's outsized financial-services sector means NIS2 scope here should always be checked against DORA overlap.
Frequently asked questions
If we're a Luxembourg financial entity, do NIS2 and DORA both apply?
TruSecure helps operationalize requirements and prepare evidence. Legal interpretation should be validated by qualified counsel.
Ask an AI about TruSecure
NIS2 (Directive (EU) 2022/2555) is enforced in Luxembourg by HCPN + CIRCL. TruSecure determines applicability against Luxembourg's national transposition specifically, rather than the EU baseline alone, and maps its requirements to a single control model shared across every framework it supports. TruSecure is operated by European entities — TRUSECURE S.R.L. in Romania and Trusecure Ltd in the United Kingdom — and stores all Customer Content with a single EU sub-processor in French and German datacentres. No Customer Content is transferred to the United States or to Asia, so the EU–US Data Privacy Framework is not a dependency.