NIS2 is aimed at the cyber security of IT systems – especially in critical and digital sectors. The GDPR, on the other hand, protects personal data and regulates its processing. In short: NIS2 secures systems, GDPR protects data.