For the majority of companies covered by the NIS2 Directive, the rules were implemented into Danish law on 1 July 2025 through the Danish NIS2 Act. The NIS2 rules apply to essential and important entities operating in 18 critical sectors.
Within the healthcare sector, the rules apply to entities that manufacture medical devices, pharmaceutical ingredients and medicinal products, entities conducting research and development activities relating to medicinal products, as well as EU reference laboratories and healthcare providers.
For life science companies covered by NIS2, cybersecurity has become a regulated core area on par with quality and patient safety. Companies are required to work systematically with risk management, document objectives and compliance efforts, carry out timely incident reporting, and will be subject to supervision by the Danish Health Data Authority.
At the same time, the NIS2 rules introduce new roles and responsibilities for companies in the life science sector, while also strengthening companies' obligations to manage cybersecurity risks throughout their supplier and supply chains. In this way, NIS2 is also becoming an important commercial discipline in today's market.
In practice, this means that many suppliers will face increased cybersecurity requirements from their customers, regardless of whether the supplier or the customer is a life science company.
Location: Online webinar (Teams link udsendes efter tilmelding).
Target audience:Members of Life Science Law.dk and Medicoindustrien
Registration
Register
