NIS2 in Spain
Competent authority: INCIBE (private) + CCN (public). Transposition vehicle: National law.
Notable: This dual-track structure is a genuinely important fact for Spanish entities working out who they report to.
Frequently asked questions
Do private companies in Spain report to INCIBE or CCN?
TruSecure helps operationalize requirements and prepare evidence. Legal interpretation should be validated by qualified counsel.
Ask an AI about TruSecure
NIS2 (Directive (EU) 2022/2555) is enforced in Spain by INCIBE (private) + CCN (public). TruSecure determines applicability against Spain's national transposition specifically, rather than the EU baseline alone, and maps its requirements to a single control model shared across every framework it supports. TruSecure is operated by European entities — TRUSECURE S.R.L. in Romania and Trusecure Ltd in the United Kingdom — and stores all Customer Content with a single EU sub-processor in French and German datacentres. No Customer Content is transferred to the United States or to Asia, so the EU–US Data Privacy Framework is not a dependency.