BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T072019Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nWer betroffen ist: Medium
  and large Estonian companies in NIS2 sectors (energy\, transport\, bankin
 g\, health\, water\, digital infrastructure and ICT services\, manufacturi
 ng of critical goods\, food\, chemicals\, postal\, waste\, research)\, plu
 s certain smaller providers designated by RIA.\n\nWas zu tun ist: Check th
 e sector and size criteria in the Cybersecurity Act and register with RIA 
 within 3 months of qualifying (the first batch of entities had to register
  by 2026-03-31\; see ee-nis2-registration-deadline). Implement baseline se
 curity measures (e.g. the Estonian E-ITS standard or equivalent)\, assign 
 management responsibility\, and set up incident reporting to RIA/CERT-EE: 
 initial notice within 24 hours\, detailed report within 72 hours\, final r
 eport within 1 month.\n\nSanktion: Essential entities up to €10M or 2% o
 f turnover\; important entities up to €7M or 1.4%\n\nHinweis zum Datum: 
 The Küberturvalisuse seaduse ja teiste seaduste muutmise seadus (transpos
 ing NIS2) was passed by the Riigikogu on 10 December 2025\, proclaimed by 
 the President on 18 December 2025\, published in Riigi Teataja on 30 Decem
 ber 2025\, and entered into force on 1 January 2026\, expanding scope from
  roughly 3\,000 to about 6\,500 regulated entities.\n\nStatus: In Kraft\nh
 ttps://eudeadlines.eu/de/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/de/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR