NIS2 · Brussels

NIS2 Compliance in Brussels

Brussels is the regulatory capital of the European Union and home to SWIFT (the backbone of global interbank messaging), Euroclear (one of the world's largest securities settlement systems), and major Belgian banks including KBC, Belfius, and ING Belgium. The European Commission, which drafts EU financial regulation including DORA and NIS2, is headquartered here. Belgium's dual supervisory model — FSMA for markets and NBB (National Bank of Belgium) for prudential oversight — adds national requirements on top of EU frameworks.

Context

Why NIS2 matters in Brussels

The NIS2 Directive (EU 2022/2555) is the EU's updated cybersecurity legislation covering essential and important entities across 18 sectors. With penalties up to €10M or 2% of global turnover for essential entities, and personal liability for management bodies, NIS2 represents a significant escalation in EU cybersecurity enforcement. Germany's national transposition (NIS2UmsuCG) adds sector-specific requirements.

SWIFT processes over 45 million financial messages daily and is arguably the most systemically important financial infrastructure in the world — making its DORA compliance critical for global financial stability. Euroclear settles over EUR 1 quadrillion annually in securities transactions. Brussels-based institutions face unique pressure because the European Commission, European Council, and European Parliament are all local, meaning regulatory enforcement is literally in their backyard. Belgium's NIS2 transposition through the NIS2 Law of April 2024 was among the first in the EU, creating early compliance obligations.

Notable financial institutions in Brussels

Terms

Related Compliance Terms