# Infringements entailing a personal data breach 35(2) — NIS2 — provision context

> Focused context for a single provision (35(2)), curated from overview.legal on 2026-10-06. Canonical: https://overview.legal/laws/nis2/art-35#par-2
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Infringements entailing a personal data breach** (NIS2, full article: https://overview.legal/laws/nis2/art-35).

## Provision text

### 35(2)

Where the supervisory authorities as referred to in Article 55 or 56 of Regulation (EU) 2016/679 impose an administrative fine pursuant to Article 58(2), point (i), of that Regulation, the competent authorities shall not impose an administrative fine pursuant to Article 34 of this Directive for an infringement referred to in paragraph 1 of this Article arising from the same conduct as that which was the subject of the administrative fine under Article 58(2), point (i), of Regulation (EU) 2016/679. The competent authorities may, however, impose the enforcement measures provided for in Article 32(4), points (a) to (h), Article 32(5) and Article 33(4), points (a) to (g), of this Directive.


## Topics on this provision

- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **Guidelines 04/2022 on the calculation of administrative fines under the GDPR** (guidance) — https://overview.legal/posts/38068
- **Guidelines 04/2022 on the calculation of administrative fines under the GDPR** §28 (guidance, EDPB) — https://overview.legal/posts/38068

---
Generated by overview.legal · https://overview.legal/laws/nis2/art-35#par-2 · 2026-10-06