BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T072025Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nQui est concerné: Medium
  and large Estonian companies in NIS2 sectors (energy\, transport\, bankin
 g\, health\, water\, digital infrastructure and ICT services\, manufacturi
 ng of critical goods\, food\, chemicals\, postal\, waste\, research)\, plu
 s certain smaller providers designated by RIA.\n\nQue faire: Check the sec
 tor and size criteria in the Cybersecurity Act and register with RIA withi
 n 3 months of qualifying (the first batch of entities had to register by 2
 026-03-31\; see ee-nis2-registration-deadline). Implement baseline securit
 y measures (e.g. the Estonian E-ITS standard or equivalent)\, assign manag
 ement responsibility\, and set up incident reporting to RIA/CERT-EE: initi
 al notice within 24 hours\, detailed report within 72 hours\, final report
  within 1 month.\n\nSanction: Essential entities up to €10M or 2% of tur
 nover\; important entities up to €7M or 1.4%\n\nNote sur la date : The K
 überturvalisuse seaduse ja teiste seaduste muutmise seadus (transposing N
 IS2) was passed by the Riigikogu on 10 December 2025\, proclaimed by the P
 resident on 18 December 2025\, published in Riigi Teataja on 30 December 2
 025\, and entered into force on 1 January 2026\, expanding scope from roug
 hly 3\,000 to about 6\,500 regulated entities.\n\nStatus: En vigueur\nhttp
 s://eudeadlines.eu/fr/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/fr/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR