What cybersecurity measures does NIS2 Article 21 require?

Answered byEU Law Lookup API (EUR-Lex): article text, in force, amendments

Price$0.005 per act or article returned

StatusOn Apify Store

NIS2 (Directive (EU) 2022/2555) Article 21 requires essential and important entities to take appropriate and proportionate cybersecurity risk-management measures, including risk analysis, incident handling, business continuity, supply-chain security, cryptography, access control and multi-factor authentication. The row quotes the article from EUR-Lex with its CELEX and link.

Tool input

{
  "query": "NIS2",
  "article": "21"
}

Ask it from an AI agent (MCP)

Add the Apify MCP server with this tool to your MCP client (Claude, Cursor, VS Code, ...); it signs you in with OAuth or Authorization: Bearer <APIFY_TOKEN>.

https://mcp.apify.com?tools=bosco_labs/eu-law-lookup

Then ask:

Use the bosco_labs/eu-law-lookup tool to answer: What cybersecurity measures does NIS2 Article 21 require?

Call the Apify API

Runs the Actor and returns the rows in one request, billed to your Apify account ($0.005 per act or article returned).

curl https://api.apify.com/v2/acts/bosco_labs~eu-law-lookup/run-sync-get-dataset-items \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"query": "NIS2", "article": "21"}'

Call the Bosco Labs HTTP API

Bosco Labs HTTP API (beta): same input and rows, $0.005 per act or article returned from prepaid credits. Get a key with a $0.50 free trial, or send the same call without a key and pay per call in USDC via x402 (no account).

curl https://api.boscolabs.dev/v1/eu-law-lookup \
  -H "Authorization: Bearer $BOSCO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query": "NIS2", "article": "21"}'

Consolidated texts from EUR-Lex (© European Union) are a documentation tool with no legal effect; only the acts published in the Official Journal of the European Union are authentic.

Example output

Snapshot taken 2026-11-07, source links in each row. First 1 of 1 rows (snapshot runs stop at 5 rows); long values shortened.

[
  {
    "schema_version": "1",
    "query": "NIS2",
    "celex": "32022L2555",
    "eli": "http://data.europa.eu/eli/dir/2022/2555/oj",
    "title": "Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Un...",
    "act_type": "Directive",
    "act_type_code": "DIR",
    "date_document": "2022-12-14",
    "date_publication": "2022-12-27",
    "oj_reference": null,
    "date_entry_into_force": "2023-01-16",
    "entry_into_force_dates": [
      "2023-01-16"
    ],
    "date_end_of_validity": null,
    "in_force": true,
    "eur_lex_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555",
    "summary_url": "https://eur-lex.europa.eu/legal-content/EN/LSU/?uri=CELEX:32022L2555",
    "language": "EN",
    "as_of": null,
    "latest_consolidated_version_date": "2022-12-27",
    "text_version": "consolidated",
    "text_celex": "02022L2555-20221227",
    "consolidated_version_date": "2022-12-27",
    "text_notice": "This text is meant purely as a documentation tool and has no legal effect. The Union's institutions do not assume any liability for its contents. The authent...",
    "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02022L2555-20221227",
    "provided_by": "Bosco Labs (boscolabs.dev)",
    "cellar_url": "http://publications.europa.eu/resource/cellar/2910a5ae-0a8c-11ee-b12e-01aa75ed71a1.0005.02/DOC_1",
    "amended_by": [],
    "...": "15 more fields"
  }
]

Run it on Apify Store →All fields and limits