BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T072026Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nKogo dotyczy: Medium and 
 large Estonian companies in NIS2 sectors (energy\, transport\, banking\, h
 ealth\, water\, digital infrastructure and ICT services\, manufacturing of
  critical goods\, food\, chemicals\, postal\, waste\, research)\, plus cer
 tain smaller providers designated by RIA.\n\nCo zrobić: Check the sector 
 and size criteria in the Cybersecurity Act and register with RIA within 3 
 months of qualifying (the first batch of entities had to register by 2026-
 03-31\; see ee-nis2-registration-deadline). Implement baseline security me
 asures (e.g. the Estonian E-ITS standard or equivalent)\, assign managemen
 t responsibility\, and set up incident reporting to RIA/CERT-EE: initial n
 otice within 24 hours\, detailed report within 72 hours\, final report wit
 hin 1 month.\n\nSankcje: Essential entities up to €10M or 2% of turnover
 \; important entities up to €7M or 1.4%\n\nUwaga do daty: The Küberturv
 alisuse seaduse ja teiste seaduste muutmise seadus (transposing NIS2) was 
 passed by the Riigikogu on 10 December 2025\, proclaimed by the President 
 on 18 December 2025\, published in Riigi Teataja on 30 December 2025\, and
  entered into force on 1 January 2026\, expanding scope from roughly 3\,00
 0 to about 6\,500 regulated entities.\n\nStatus: Obowiązuje\nhttps://eude
 adlines.eu/pl/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/pl/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR