BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T072026Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nVoor wie geldt dit: Mediu
 m and large Estonian companies in NIS2 sectors (energy\, transport\, banki
 ng\, health\, water\, digital infrastructure and ICT services\, manufactur
 ing of critical goods\, food\, chemicals\, postal\, waste\, research)\, pl
 us certain smaller providers designated by RIA.\n\nWat u moet doen: Check 
 the sector and size criteria in the Cybersecurity Act and register with RI
 A within 3 months of qualifying (the first batch of entities had to regist
 er by 2026-03-31\; see ee-nis2-registration-deadline). Implement baseline 
 security measures (e.g. the Estonian E-ITS standard or equivalent)\, assig
 n management responsibility\, and set up incident reporting to RIA/CERT-EE
 : initial notice within 24 hours\, detailed report within 72 hours\, final
  report within 1 month.\n\nSanctie: Essential entities up to €10M or 2% 
 of turnover\; important entities up to €7M or 1.4%\n\nOpmerking bij de d
 atum: The Küberturvalisuse seaduse ja teiste seaduste muutmise seadus (tr
 ansposing NIS2) was passed by the Riigikogu on 10 December 2025\, proclaim
 ed by the President on 18 December 2025\, published in Riigi Teataja on 30
  December 2025\, and entered into force on 1 January 2026\, expanding scop
 e from roughly 3\,000 to about 6\,500 regulated entities.\n\nStatus: Van k
 racht\nhttps://eudeadlines.eu/nl/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/nl/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR