Comment by Beretta_Vexee

So there are legitimate reasons for doing this, such as avoiding having to write reports and request authorizations from oneself, not having to disclose certain sensitive information, etc.

The right way to do this is to draft a framework law and a few decrees along the lines of “administrations XXX and YYY will apply NIS2 with the following exceptions and adaptations ....”

This avoids creating overly broad exemptions, ensuring that there is a reference framework, and preventing each administration from developing its own system.

This is very common in the arms and nuclear sectors, where many civil norms and standards clearly state “not applicable to nuclear” and the nuclear standard states “apply civil standard XXX, with the following specific provisions, the competent authority is the ONR.”

Declaring an overly broad exemption from the outset is not the right way to go about it.