# General conditions for imposing administrative fines on essential and important entities — NIS2 — context bundle

> Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/nis2/art-34
> Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

## Provision

### General conditions for imposing administrative fines on essential and important entities — General conditions for imposing administrative fines on essential and important entities

*NIS2, nis2-art-34-en — https://overview.legal/laws/nis2/art-34*

1. Member States shall ensure that the administrative fines imposed on essential and important entities pursuant to this Article in respect of infringements of this Directive are effective, proportionate and dissuasive, taking into account the circumstances of each individual case.

2. Administrative fines shall be imposed in addition to any of the measures referred to in Article 32(4), points (a) to (h), Article 32(5) and Article 33(4), points (a) to (g).

3. When deciding whether to impose an administrative fine and deciding on its amount in each individual case, due regard shall be given, as a minimum, to the elements provided for in Article 32(7).

4. Member States shall ensure that where they infringe Article 21 or 23, essential entities are subject, in accordance with paragraphs 2 and 3 of this Article, to administrative fines of a maximum of at least EUR 10 000 000 or of a maximum of at least 2 % of the total worldwide annual turnover in the preceding financial year of the undertaking to which the essential entity belongs, whichever is higher.

5. Member States shall ensure that where they infringe Article 21 or 23, important entities are subject, in accordance with paragraphs 2 and 3 of this Article, to administrative fines of a maximum of at least EUR 7 000 000 or of a maximum of at least 1,4 % of the total worldwide annual turnover in the preceding financial year of the undertaking to which the important entity belongs, whichever is higher.

6. Member States may provide for the power to impose periodic penalty payments in order to compel an essential or important entity to cease an infringement of this Directive in accordance with a prior decision of the competent authority.

7. Without prejudice to the powers of the competent authorities pursuant to Articles 32 and 33, each Member State may lay down the rules on whether and to what extent administrative fines may be imposed on public administration entities.

8. Where the legal system of a Member State does not provide for administrative fines, that Member State shall ensure that this Article is applied in such a manner that the fine is initiated by the competent authority and imposed by competent national courts or tribunals, while ensuring that those legal remedies are effective and have an equivalent effect to the administrative fines imposed by the competent authorities. In any event, the fines imposed shall be effective, proportionate and dissuasive. The Member State shall notify to the Commission the provisions of the laws which it adopts pursuant to this paragraph by 17 October 2024 and, without delay, any subsequent amendment law or amendment affecting them.

## Guidance

### EDPB Work Programme 2026-2027

*EDPB — https://overview.legal/posts/125689*

EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: • Issuing opinions, guidelines, recommendations and best practices to promote a common understanding of the GDPR and the Law Enforcement Directive (LED); • Advising the European Commission on any…

### EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence

*EDPB — https://overview.legal/posts/53738*

EDPB, EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI)

### Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

*EDPB — https://overview.legal/posts/53750*

EDPB, Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

### Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01)

*EDPB — https://overview.legal/posts/38076*

The Article 29 Data Protection Working Party issued these guidelines (WP260 rev.01), adopted on 29 November 2017 and last revised on 11 April 2018, to provide interpretive and practical guidance on the transparency requirements under the GDPR (Articles 12–14). The document addresses the form, timing, content, and modalities of information provided to data subjects, including issues such as plain language, layered privacy notices, information for children, and exceptions to the obligation to provide information. No fines or enforcement actions are imposed, as this is a guidance document rather than an enforcement decision.

### VERSIEGESCHIEDENIS

*EDPB — https://overview.legal/posts/38079*

De EDPB heeft op 20 juni 2023 de aanbevelingen 1/2022 inzake bindende bedrijfsvoorschriften voor verwerkingsverantwoordelijken (artikel 47 AVG) vastgesteld, ter vervanging van de eerdere WP 256 rev.01 en WP 264. Het document voorziet in een standaardaanvraagformulier voor goedkeuring van bindende bedrijfsvoorschriften en geeft uitleg bij de vereiste inhoudelijke elementen en beginselen, waaronder de afbakening tussen wat in de bindende bedrijfsvoorschriften zelf en wat in de aanvraag bij de leidende toezichthoudende autoriteit moet worden opgenomen. De aanbevelingen zijn bedoeld om ondernemingen die persoonsgegevens doorgeven aan groepsentiteiten in derde landen zonder passend beschermingsniveau (artikel 45 AVG) te ondersteunen bij het voldoen aan de passende waarborgen van artikel 46 AVG.

## Related topics

- **Fines** — https://overview.legal/topics/boetes
  ## Legal Framework
- **NIS2 Addressees and Responsible Entities** — https://overview.legal/topics/nis2-addressees-identification
  ## Legal Framework

---
Generated by overview.legal · https://overview.legal/laws/nis2/art-34 · 2026-08-22
