Luxembourg’s Law of 5 May 2026 expanded NIS2 coverage from ~1,000 to ~8,000 entities. Learn which authority regulates you, how CIRCL and GOVCERT.LU differ, and what DORA means for financial compliance.
Cyprus holds €66 billion in banking assets and the EU’s 3rd-largest ship registry. Here’s what Law 60(I)/2025 requires from essential entities in each sector.
Slovenia’s NIS2 law ZInfV-1: 6,000+ organisations in scope, criminal sanctions to 15 years, December 2025 deadline. URSIV, SI-CERT, and Krško explained.
Croatia’s NIS2 Cybersecurity Act expanded scope to 10,000 organisations — understand your entity status, ZSIS obligations, and the 12-month compliance deadline.
Latvia adds a mandatory cybersecurity manager role NIS2 never required. Find out what CERT.LV expects, who must register, and the penalties now in force.
Bulgaria’s NIS2 transposition is live from 17 February 2026. Learn who is in scope, which authority enforces what, and get a practical compliance checklist under the amended Cybersecurity Act.
Slovak Cybersecurity Act No. 366/2024 is in force. Register with NBU, meet 12-month security deadlines, and report incidents to SK-CERT within 24 hours.
The 2007 cyber attacks made Estonia the EU’s cybersecurity pioneer. What the NIS2 Cybersecurity Act amendment means for 5,500–7,000 organisations by 2026.
Hungary’s NIS2 audit deadline is June 30, 2026. Understand SZTFH registration, entity scope, and the management liability provision that other guides miss.
Lithuania’s NCSC-LT notified 1,443 entities in April 2025. Organisational controls due by 17 April 2026, technical measures by 17 April 2027 — here is the full compliance roadmap.
