Solutions · Public sector
Public administration is in scope regardless of size.
Central and, where Member States decide, regional public administration entities are Annex I entities, and NIS2 Article 2(2) brings them into scope without the usual size gate.
Typical profile
- Sector
- Public administration
- Employees
- 250 or more
- AI
- Uses AI tools
- Flags
- None
- Public administration is Annex I; the size gate does not protect it (Art 2(2)).
- AI used in public services is frequently high-risk under Annex III.
- Procurement asks your suppliers for the same proof you must provide.
Obligations to prove
64
NIS2 essential entity on this profile.
- Regulation (EU) 2016/679 — data protection3
Applies to every organisation established in the EU that processes personal data.
- Directive (EU) 2022/2555 — cybersecurity8
You declared yourself a NIS2 essential entity.
- Commission Implementing Regulation (EU) 2024/2690 — NIS2 Art 21(2) technical requirements48
The Implementing Regulation's 47 technical requirement sections elaborate NIS2 Art 21(2).
- Regulation (EU) 2024/1689 — artificial intelligence5
You build or use AI systems — Art 4 AI literacy already applies; other tiers depend on classification.
First statutory clock if something goes wrong: NIS2 early warning, 24 hours (NIS2 Art 23(4)(a)).
Computed by the platform's scope finder. A starting point, not a legal determination.
The modules that matter here
Start with these 64 obligations.
Sign up, confirm the scope in onboarding, connect your first system.
Start free →