The directive provides for significantly higher fines than before – up to €10 million or 2% of global annual turnover (whichever is higher).
In addition, the personal liability of the management may apply if gross negligence is committed or supervisory duties are breached.

Furthermore, there is a risk of reputational damage and exclusion from supply chains if customers or clients demand NIS2 evidence.