Current Status: Not implemented
Expected or actual implementation date or timeline
1 January 2027 (tentatively).
If implemented, whether a transition period applies and, if so, its duration
N/A
Other important remarks/notes
A proposal was referred to the Council on Legislation for consideration in May, 2026.
During spring/summer of 2026, the bill proposal is expected (tentatively). The intention is, as stated by the government, to adopt the bill during the summer of 2026.
During Q1, 2027, authorities are expected to issue regulations on risk analysis, security measurements, background controls and incident reporting.
The platform for incident reporting is expected to be launched during fall of 2027.
Key contact

© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.
Connect with us





