Question 1

Does NIS2 apply to my Irish business?

Accepted Answer

NIS2 applies to Irish businesses in 18 essential and important sectors with 50+ employees or €10M+ turnover. This includes IT services, healthcare, energy, transport, digital infrastructure, and more. The NCSC estimates around 3,500 Irish entities will be in scope, up from roughly 120 under the original NIS Directive.

Question 2

What is the NIS2 deadline in Ireland?

Accepted Answer

The EU transposition deadline was 17 October 2024. Ireland has not yet enacted its law (the National Cyber Security Bill), and on 8 July 2026 the European Commission referred Ireland to the EU Court of Justice for incomplete transposition. Once in force, fines for essential entities reach at least €10 million or 2% of worldwide turnover (€7 million or 1.4% for important entities), and management bodies must approve and oversee cybersecurity measures. In-scope organisations are already being asked for NIS2-level controls by customers and insurers.

Question 3

How long does the GuardAI compliance assessment take?

Accepted Answer

The GuardAI assessment takes approximately 5 minutes. You answer plain-English questions about your business operations, and instantly receive your compliance score and a prioritised action plan.

Question 4

Is my data stored in the EU?

Accepted Answer

Yes. All GuardAI data is processed and stored within the EU, compliant with GDPR Article 44-49 data transfer restrictions.

Question 5

What is the difference between GDPR and NIS2?

Accepted Answer

GDPR focuses on personal data protection and applies to almost all businesses. NIS2 is a cybersecurity directive requiring risk management, incident reporting, and resilience measures in critical sectors. Most Irish businesses will need to comply with both.

Choose Your Assessment

GDPR Compliance

NIS2 Readiness

AI Act Check