The Italian National Cybersecurity Agency (ACN) has published Determination No. 314287/2026, introducing significant simplifications to the registration procedure for entities subject to NIS 2 requirements ahead of the 2027 registration cycle.

The main change concerns organisations already included in the national NIS register: where no changes have occurred to the information previously submitted, a new annual declaration will no longer be required.

ACN has also updated its registration FAQs and announced that, from October 31, 2026, late declarations will no longer be accepted through the online portal, in order to allow the implementation of new functionalities.

The simplification of registration and reporting procedures does not affect the substantive security and governance obligations established under the NIS 2 regulatory framework.