BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T061642Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nWho is affected: Medium a
 nd large Estonian companies in NIS2 sectors (energy\, transport\, banking\
 , health\, water\, digital infrastructure and ICT services\, manufacturing
  of critical goods\, food\, chemicals\, postal\, waste\, research)\, plus 
 certain smaller providers designated by RIA.\n\nWhat to do: Check the sect
 or and size criteria in the Cybersecurity Act and register with RIA within
  3 months of qualifying (the first batch of entities had to register by 20
 26-03-31\; see ee-nis2-registration-deadline). Implement baseline security
  measures (e.g. the Estonian E-ITS standard or equivalent)\, assign manage
 ment responsibility\, and set up incident reporting to RIA/CERT-EE: initia
 l notice within 24 hours\, detailed report within 72 hours\, final report 
 within 1 month.\n\nPenalty: Essential entities up to €10M or 2% of turno
 ver\; important entities up to €7M or 1.4%\n\nNote: The Küberturvalisus
 e seaduse ja teiste seaduste muutmise seadus (transposing NIS2) was passed
  by the Riigikogu on 10 December 2025\, proclaimed by the President on 18 
 December 2025\, published in Riigi Teataja on 30 December 2025\, and enter
 ed into force on 1 January 2026\, expanding scope from roughly 3\,000 to a
 bout 6\,500 regulated entities.\n\nStatus: In force\nhttps://eudeadlines.e
 u/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR