DNSC suspends road transport registration in SmartNIS portal

The National Cyber Security Directorate (DNSC) has suspended the registration of road transport companies in the SmartNIS portal. This decision follows a request from the National Union of Road Transporters in Romania (UNTRR) to clarify how the NIS2 Directive applies to the transport sector.

UNTRR argues that classification should not be based solely on CAEN codes, employee numbers, or turnover. The union maintains that analysis must consider a company’s actual role in operating IT systems and the real impact of potential cyber incidents. They noted that most transport employees are drivers without IT security responsibilities and that using GPS or fleet management tools does not make a company an operator of intelligent transport systems.

The DNSC will seek clarifications from the European Union and consult with counterpart institutions in other member states regarding the inclusion of road transport operators under Directive (EU) 2022/2555.