There seems to be some confusion about NIS-2. Some registrars, like Openprovider, are already implementing Article 28 of the directive even though it hasn't been transposed into member state law.