The Danish FSA has published the designated IT suppliers to financial companies subject to NIS2 and under the supervision of the Danish FSA
Published 27 November 2024
Category: Updates
The Danish FSA has appointed a number of IT suppliers as operators of financial digital infrastructure to which NIS2 applies. The details are available here (in Danish).
As of 18 October 2024, the NIS-2 directive[1] (“NIS2”) applies to the most important IT suppliers to the financial sector.
While the implementation of NIS2 in general has been postponed to 2025 take effect in Denmark, the Danish Financial Supervisory Authority (the “Danish FSA”) already in May 2024, with a new Chapter 19 c of the Financial Business Act, was provided with the legal framework for supervision of the financial sector under the DORA Regulation[2] and NIS2.
The designated IT suppliers are set out below:
- JN Data A/S
- FORENINGEN BANKDATA
- SDC A/S
- Bec Financial Technologies A.M.B.A.
- e-nettet A/S
- Mastercard Payment Services Denmark A/S
The purpose of NIS2 is to strengthen cybersecurity by setting requirements for financial companies’ IT security, their reporting of security incidents, and risk management. Find more information on the authority given to the Danish FSA pursuant to a new Chapter 19c of the Danish Financial Business Act on Mazanti Pulse.
NIS2 does not apply to financial undertakings covered by the DORA Regulation. For these companies, the DORA Regulation will instead apply from 17 January 2025.
[1] Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union.
[2] Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on Digital Operational Resilience for the financial sector, and
Also tagged ‘Cybersecurity’
The Danish Parliament has adopted regulation to implement the NIS2 Directive and the CER Directive
On April 29, 2025, on the day where major parts of France, Spain, and Portugal suffered severe utility breakdowns, the Danish Parliament adopted the bills for implementing the NIS2 Directive and the CER Directive.
CERCritical SectorsCybersecurityNIS2The Danish government has presented bills for implementing the NIS2 Directive and the CER Directive
On 6 February 2025, the bills for implementing the NIS2 Directive and the CER Directive were presented by the Danish government to the Danish Parliament.
CERCybersecurityNIS2Other updates
The revised European Sustainability Reporting Standards and the voluntary reporting standards are now final
The revised standards will take effect for financial years starting on or after 1 January 2027, with the first reports under the revised regime expected in 2028.
ComplianceCSRDDisclosure RequirementsESRSSustainabilitySFDR 2.0 – ECON agrees negotiating position with stricter fossil fuel test
On 10 September 2026, the European Parliament’s Committee on Economic and Monetary Affairs (“ECON”) voted on its negotiating position on the proposed amendments to the SFDR.
Disclosure RequirementsSFDRSustainabilityNew AML Act Amendments Extend Obligations for Danish Fund Managers
On 8 September 2026, the Danish Parliament adopted amendments to the Danish Anti-Money Laundering Act, extending the risk assessment, the requirements for written policies, procedures and controls, and the group of entities required to have these tested.
AIFMDComplianceDanishKYC / AMLPRIIP KIDS: Increased Focus on Procedures and Controls
In August 2026, the Danish Financial Supervisory Authority published four inspection reports on fund managers' procedures for preparing and reviewing PRIIP KIDs, together with an updated set of Q&As.
KID / PRIIPSThe Danish FSAProposal on Danish implementation of the amendments to CSRD
On 2 July 2026, the Danish Business Authority submitted a draft bill implementing the amendments to the CSRD into Danish law for public consultation.
ComplianceCSDDDCSRDDanish RegulationSustainabilityESMA Launches Consultation Paper on selected KPIs under the Delegated Act under the Taxonomy Regulation
The consultation primarily focuses on the following three main topics: Revision of the OpEx KPI, Voluntary use of OpEx KPI by financial undertakings, and Group Taxonomy reporting.
ComplianceCSRDDisclosure RequirementsESRSSFDRSustainability