Article 28 — Database of domain name registration data
NIS2, Directive (EU) 2022/2555
What does NIS2 Article 28 say?
Short answer, straight from the official text
1. For the purpose of contributing to the security, stability and resilience of the DNS, Member States shall require TLD name registries and entities providing domain name registration services to collect and maintain accurate and complete domain name registration data in a dedicated database with due diligence in accordance …
Source: NIS2, Directive (EU) 2022/2555, read 2026-08-14.
| In the act | EU 2022/2555 |
| Chapter | V · Jurisdiction and registration |
| CELEX | 32022L2555 |
| Read on | 2026-08-14 |
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
Jump to a point: Point 1 · Point 2 · Point 3 · Point 4 · Point 5 · Point 6 · Point 7
1. For the purpose of contributing to the security, stability and resilience of the DNS, Member States shall require TLD name registries and entities providing domain name registration services to collect and maintain accurate and complete domain name registration data in a dedicated database with due diligence in accordance with Union data protection law as regards data which are personal data.
2. For the purposes of paragraph 1, Member States shall require the database of domain name registration data to contain the necessary information to identify and contact the holders of the domain names and the points of contact administering the domain names under the TLDs. Such information shall include:
(a) the domain name;
(b) the date of registration;
(c) the registrant’s name, contact email address and telephone number;
(d) the contact email address and telephone number of the point of contact administering the domain name in the event that they are different from those of the registrant.
3. Member States shall require the TLD name registries and the entities providing domain name registration services to have policies and procedures, including verification procedures, in place to ensure that the databases referred to in paragraph 1 include accurate and complete information. Member States shall require such policies and procedures to be made publicly available.
The article continues in the official text.
Other articles in this chapter
Who does this apply to
The register names five roles. Open a role to see the duties this act places on it, each row with its article and its source.
Does this apply to us?
- Do ai governance rules apply to a cloud provider?
- Do personal data rules apply to a cloud provider?
- Do cross-border data rules apply to a cloud provider?
- Do cybersecurity rules apply to a cloud provider?
- Do health data rules apply to a cloud provider?
- Do online platforms rules apply to a cloud provider?
All roles in the register · All questions by role
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Back to the act · EU acts, read down to the national law
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
