Tools / Regulatory tracker / Critical Entities Resilience Directive
Regulatory tracker · European Union · Cyber and resilience
Critical Entities Resilience Directive
Member States identify critical entities, including digital infrastructure, which then carry physical resilience duties.
In force Member States had to identify critical entities by 17 July 2026; duties apply to them from then on.
What it does
The rule in brief
Directive (EU) 2022/2557 covers physical resilience (natural hazards, sabotage, terrorism) for critical entities in sectors including digital infrastructure. Identified entities must carry out risk assessments, take resilience measures and notify incidents that significantly disrupt their services.
Timeline
Key dates
| Date | What happens |
|---|---|
| 18 October 2024 | National rules apply |
| 17 July 2026 | Critical entities identified |
Primary sources
Read it at source
- Directive (EU) 2022/2557 (CER), OJ L 333, 27.12.2022 Official Journal
Cite as: InfraCompute regulatory tracker, “Critical Entities Resilience Directive”, checked 27 October 2026, https://www.infracompute.co.uk/tools/regulatory-tracker/eu-cer-directive.
Related
Also on the tracker
Cyber Security and Resilience Bill
Brings data centres of 1 MW or more (10 MW for enterprise sites) under the NIS rules, with Ofcom as regulator.
United Kingdom · Cyber and resilienceData centres designated critical national infrastructure
UK data centres were designated CNI in September 2024, alongside energy and water.
European Union · Cyber and resilienceNIS2 Directive
Data centre service providers are digital infrastructure entities with cyber risk and incident reporting duties.
European Union · Energy and efficiencyEU data centre energy reporting and rating scheme
Annual reporting for data centres of 500 kW or more; rating scheme proposed September 2026; minimum standards next.
Method
Each entry is written from the official text and the government, regulator or legislature pages listed above, never from secondary commentary. This entry is checked by hand at each content review. Status and dates can change after the review date, so check the source before relying on it. General information drawn from public filings. It is not legal advice on any transaction, and using this page does not create a lawyer-client relationship. Views are personal.
