BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//EU Deadline Radar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU Deadline Radar
NAME:EU Deadline Radar
BEGIN:VEVENT
UID:nis2-estonia-cybersecurity-act@eudeadlines.eu
DTSTAMP:20261025T070231Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,500 en
 tities
DESCRIPTION:Estonia's amended Küberturvalisuse seadus transposing NIS2 ent
 ered into force on 1 January 2026\, roughly doubling the number of regulat
 ed organisations to about 6\,500. In-scope entities must register with the
  Information System Authority (RIA)\, apply risk-management measures\, and
  report significant incidents within 24 hours (initial notice)\, 72 hours 
 (detailed report) and 1 month (final report).\n\nVem som berörs: Medium a
 nd large Estonian companies in NIS2 sectors (energy\, transport\, banking\
 , health\, water\, digital infrastructure and ICT services\, manufacturing
  of critical goods\, food\, chemicals\, postal\, waste\, research)\, plus 
 certain smaller providers designated by RIA.\n\nVad du ska göra: Check th
 e sector and size criteria in the Cybersecurity Act and register with RIA 
 within 3 months of qualifying (the first batch of entities had to register
  by 2026-03-31\; see ee-nis2-registration-deadline). Implement baseline se
 curity measures (e.g. the Estonian E-ITS standard or equivalent)\, assign 
 management responsibility\, and set up incident reporting to RIA/CERT-EE: 
 initial notice within 24 hours\, detailed report within 72 hours\, final r
 eport within 1 month.\n\nSanktion: Essential entities up to €10M or 2% o
 f turnover\; important entities up to €7M or 1.4%\n\nAnmärkning om datu
 met: The Küberturvalisuse seaduse ja teiste seaduste muutmise seadus (tra
 nsposing NIS2) was passed by the Riigikogu on 10 December 2025\, proclaime
 d by the President on 18 December 2025\, published in Riigi Teataja on 30 
 December 2025\, and entered into force on 1 January 2026\, expanding scope
  from roughly 3\,000 to about 6\,500 regulated entities.\n\nStatus: I kraf
 t\nhttps://eudeadlines.eu/sv/deadline/nis2-estonia-cybersecurity-act
URL:https://eudeadlines.eu/sv/deadline/nis2-estonia-cybersecurity-act
CATEGORIES:EE,NIS2
LAST-MODIFIED:20260908T000000Z
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 7 days
TRIGGER;VALUE=DURATION:-P6DT15H
END:VALARM
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:NIS2: Estonia NIS2: amended Cybersecurity Act applies to ~6\,50
 0 entities — due in 1 day
TRIGGER;VALUE=DURATION:-PT15H
END:VALARM
END:VEVENT
END:VCALENDAR
