Key Takeaways
- Article 6 of ACN Determination 127437/2026 regulates the process for designating the NIS representative in Italy for subjects covered by Article 5, paragraph 1, letter
b)of Legislative Decree 138/2024 (ACN platform determination, Legislative Decree 138/2024). - The designation package must be transmitted from 1 September to 30 November of each year to ACN's digital domicile, together with the digital domicile to be used for subsequent interactions (ACN platform determination).
- ACN communicates authorization or denial within 30 days from receipt. If integrations are requested, the term is suspended and restarts when the requested information is received. The requested integrations must be provided within 10 days, and late responses may justify denial of census and registration (ACN platform determination).
- ACN FAQ
SIT.2states that the organizations expected to indicate NIS representative data are legal persons with no establishment in the Union that have designated their NIS representative in Italy and perform the inherently cross-border activities listed in Article 7, paragraph 5, of the NIS decree (ACN FAQ on information updates). - Once the representative is in place, Article 6 also allows point-of-contact functions to be delegated either to the representative itself, if it is a natural person, or to the legal representative, a general attorney, or an employee of the representative, if the representative is a legal person (ACN platform determination).
Scope of This Article
This article explains the Italy-based NIS representative only from the angle that is already documented in the official sources:
- which organizations are concerned by the representative requirement in practice;
- how the designation workflow operates with ACN;
- how that designation connects to registration, census, and point-of-contact management.
The article does not guess the content of the documentation package beyond what ACN has officially published. Where the determination points to a dedicated ACN website section for the required documentation, that is stated as such.
The Short Answer: The Representative Is a Specific Cross-Border NIS Mechanism
The Italy-based NIS representative is not a general-purpose role for all NIS subjects. It is a specific mechanism for the category of subjects addressed by Article 5, paragraph 1, letter b) of Legislative Decree 138/2024 and operationalized by Article 6 of ACN Determination 127437/2026 (ACN platform determination, Legislative Decree 138/2024).
Based on the ACN documentation published so far, the operational summary is:
| Question | Current official answer |
|---|---|
| Who is concerned? | The subjects covered by Article 5(1)(b), as operationally described in ACN FAQ SIT.2 |
| When is the designation transmitted? | From 1 September to 30 November each year |
| Where is it sent? | To ACN's digital domicile, using the documentation indicated in the dedicated section of the ACN site |
| What happens next? | ACN authorizes or denies the subject's ability to proceed to census and registration |
| Does the representative affect point-of-contact setup? | Yes, point-of-contact functions may be delegated through the representative structure under Article 6(4) |
Which Organizations Are Concerned in Practice
The platform determination identifies the legal hook by referring to subjects under Article 5, paragraph 1, letter b) of the NIS decree. ACN's FAQ SIT.2 adds the practical interpretation used for information management: the organizations expected to indicate the identity and contact details of the NIS representative are legal persons that:
- have no establishment in the territory of the Union;
- have designated their NIS representative in Italy; and
- perform the inherently cross-border activities listed in Article 7, paragraph 5, of the decree.
The FAQ then lists those inherently cross-border activities as including:
- DNS service providers;
- top-level-domain registry operators;
- domain-name registration service providers;
- cloud-computing service providers;
- data-center service providers;
- content-delivery-network providers;
- managed service providers;
- managed security service providers;
- online marketplace providers;
- online search engine providers;
- social networking service platform providers.
This is the clearest operational trigger in the published official documentation because it tells organizations when the representative issue is likely to apply in practice.
The Designation Window Runs from 1 September to 30 November
Article 6, paragraph 1, states that, to designate their NIS representative in Italy, the relevant subjects transmit and update, from 1 September to 30 November of each year, to ACN's digital domicile the documentation indicated in the dedicated section of the ACN website. Through the same channel, those subjects also communicate the digital domicile to be used for subsequent interactions with the national NIS competent authority (ACN platform determination).
Two points are important here:
- the determination clearly gives the yearly submission window;
- the determination does not enumerate the documentation set in the article body itself, but instead refers to the documentation indicated in the dedicated ACN website section.
Where that documentation set is needed, the correct wording is therefore not to infer its contents but to refer back to the official ACN instructions.
ACN's Response Timeline Is Defined
Article 6, paragraph 2, states that ACN communicates to the subject's digital domicile the authorization, or the denial, to proceed to census and registration within 30 days from receipt of the submission (ACN platform determination).
Article 6, paragraph 3, adds the integration mechanism:
- if ACN needs integrations or additional information, the 30-day term is suspended;
- the term restarts from the date ACN receives the requested integrations or information;
- the requested material must be provided within 10 days from the request;
- late responses may justify denial of census and registration.
This is operationally significant because the designation is not just a formal nomination step. It is a gate that unlocks the ability to proceed with the platform onboarding flow.
The Representative Also Connects to Point-of-Contact Delegation
Article 6, paragraph 4, is one of the most relevant operational clauses. Without prejudice to Article 4, paragraph 2, the relevant subjects may delegate point-of-contact functions:
- to the NIS representative itself, when the representative is a natural person;
- to the legal representative, one of the general attorneys, or an employee of the NIS representative itself, when the representative is a legal person.
This means the representative is not just an external contact record. It can become part of the operational access and communication chain used for NIS platform obligations.
That matters for service design. If the representative is structured as a legal person rather than an individual, the organization should already be clear about who, within that structure, will actually perform the point-of-contact function.
Representative Data Must Then Be Maintained in the Yearly Information Cycle
Article 16, paragraph 5, states that subjects under Article 5, paragraph 1, letter b), which have designated their NIS representative in Italy under Article 6, must verify that the representative's identity and contact data are correct and updated during the annual information update (ACN platform determination).
This shows the representative is not a one-time designation that disappears after onboarding. Once the representative exists in the ACN compliance architecture, its data becomes part of the maintained information set.
ACN FAQ Adds a Useful Digital-Domicile Operational Detail
The ACN FAQ on information updates includes a practical point that matters for onboarding. Where a subject does not have its own PEC and is required to designate an Italy-based representative in the Union and has done so, the representative's PEC can be used in the workflow for sending point-of-contact credential documentation to ACN (ACN FAQ on information updates).
That does not change the legal designation rule, but it does show how the representative can become operationally relevant in the credential and communication chain for platform access.
What Organizations Should Prepare Internally
Even without inferring details beyond the published documentation, the internal preparation work is already clear:
- verify whether the organization falls into the practical scope described by ACN FAQ
SIT.2; - identify whether the representative will be a natural person or a legal person;
- determine who would perform the point-of-contact function if delegation under Article 6(4) is used;
- prepare the submission package required by the dedicated ACN website section;
- ensure the digital domicile used for ACN interactions is governed, monitored, and documented;
- plan for ongoing maintenance of the representative's identity and contact data in the annual update cycle.
The administrative step is narrow. The governance implication is broader because the representative can become part of the formal communication and access chain for NIS obligations in Italy.
FAQ
Does every NIS subject need an Italy-based NIS representative?
No. The published documentation ties the process to subjects under Article 5, paragraph 1, letter b) of the decree. ACN FAQ SIT.2 operationally describes the affected organizations as legal persons with no establishment in the Union that perform the inherently cross-border activities listed in Article 7, paragraph 5, and have designated their NIS representative in Italy (ACN FAQ on information updates).
When must the designation package be sent to ACN?
Article 6 states that the relevant subjects transmit and update the designation package from 1 September to 30 November of each year (ACN platform determination).
Does ACN publish the document list directly in Article 6?
No. Article 6 refers to the documentation indicated in the dedicated section of the ACN website. Details are defined in the official ACN documentation for that dedicated section (ACN platform determination).
Can the NIS representative also be the point of contact?
Yes, if the representative is a natural person. If the representative is a legal person, the point-of-contact role can be delegated to that representative's legal representative, a general attorney, or an employee, under Article 6, paragraph 4 (ACN platform determination).
Conclusion
The Italy-based NIS representative is a specific cross-border compliance mechanism, not a universal role for all NIS entities. The published official documentation already defines the yearly designation window, the ACN response timeline, the integration workflow, and the connection between the representative and point-of-contact delegation. What organizations need is a clear internal decision on applicability, ownership, digital-domicile governance, and the documentation package required by ACN's dedicated instructions.