EUTechRegResearch
MenuClose menu
Digital Omnibus legislative tracker
Texts to 22 Oct 2026

Article 6 – Definitions

Only Parliament amendments would change this article. Parliament committees have tabled 2 amendments to this article, 2 of them proposing new definitions.

Latest text22 October 2026ST 14756/26

Contains no amendment to this article.

What each text does

  1. 19 Nov 2025 Commission proposalCOM(2025) 837 No amendment to this article.
  2. 21 May 2026 Council textST 9547/26 No amendment to this article.ST 9547/26 reproduces only some of the proposal’s changes, so this comparison applies only those it shows or visibly drops. It says nothing about the others.
  3. 10 Jun 2026 Council textST 10426/26 No amendment to this article.
  4. 18 Jun 2026 Council textST 10677/26 No amendment to this article.
  5. 27 Jul 2026 ITRE–LIBE amendments 1741–1840 to the draft reportCJ72-AM-791883 2 amendments to this article. Amendments in this document
  6. 3 Sep 2026 Council textST 12535/26 No amendment to this article.
  7. 2 Oct 2026 Council textST 13886/26 No amendment to this article.
  8. 22 Oct 2026 Council textST 14756/26 No amendment to this article.

Parliament amendments

2 amendments to this article

2 would add wording.

By political group; co-sponsored amendments count for each group
TypeRenew
+ Addition2

By political group

  • + Addition Renew 2
  1. 1800 Addition Michael McNamara +4Renew · ITRE–LIBE ‘Main establishment’ means the main establishment in Europe where the decisions related to the cybersecurity risk-management measures are…

    i) In Article 6, the following point is added:

    (42)‘Main establishment’ means the main establishment in Europe where the decisions related to the cybersecurity risk-management measures are predominantly taken. This could be the legal place of establishment, or another office address, which should be determined according to objective criteria and should imply the effective and real exercise of management activities determining the main cybersecurity decisions, including the purposes and means for those decisions. ENISA and the competent authorities shall make that list.'

    Tabled by
    Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Bart Groothuis, Veronika Cifrová Ostrihoňová
    Group
    Renew
    Targets
    NIS2 Directive Article 6 – point 42
    Document
    ITRE–LIBE amendments 1741–1840 to the draft report
    Printed header
    Article 6 – paragraph 1 – point 1 – point i (new) / Directive (EU) 2022/2555 / Article 6 – point 42
  2. 1803 Addition Bart Groothuis +5Renew · ITRE–LIBE ‘Main establishment’ means the main establishment in Europe where the decisions related to the cybersecurity risk-management measures are…

    1a. In Article 6, the following point is added:

    (42)‘Main establishment’ means the main establishment in Europe where the decisions related to the cybersecurity risk-management measures are predominantly taken. This could be the legal place of establishment, or another office address, which should be determined according to objective criteria and should imply the effective and real exercise of management activities determining the main cybersecurity decisions, including the the purposes and means for those decisions. ENISA and the competent authorities shall make that list.

    Tabled by
    Bart Groothuis, Ivars Ijabs, Morten Løkkegaard, Nikola Minchev, Svenja Hahn, Andreas Glück
    Group
    Renew
    Targets
    NIS2 Directive Article 6 – point 42
    Document
    ITRE–LIBE amendments 1741–1840 to the draft report
    Printed header
    Article 6 – paragraph 1 – point 1 a (new) / Directive (EU) 2022/2555 / Article 6 – point 42