Slovakia

(a) What is the NIS2 implementation status?

The draft legislation implementing NIS2 Directive in Slovakia was published on 31 May 2024. The implementation of NIS2 will result in novelization of the Act No. 69/2018 Coll. on cybersecurity and relating legislation. According to the initial proposal in the draft legislation, the changes to the existing cybersecurity legislation should be effective as of 1 January 2025. The formal legislative process in the national parliament has not yet commenced. View draft legislation (available in Slovak only)

(b) What is the envisaged NIS2 implementation timeline?

The NIS2 implementation shall be effective upon 18 October 2024.

(c) What does the NIS2 mean for other national cybersecurity legislation?

The implementation of NIS2 shall result in novelization of the Act No. 69/2018 Coll. on cybersecurity and relating legislation.

(d) Who will be the supervisory authority and how are they preparing the market?

The supervisory authority for the matter of cybersecurity is and shall be National Security Authority in cooperation with the ministries of the Slovak Republic. The web site of the National Security Authority available also in English may be found here.

National Security Authority is also national point of contact for cybersecurity. Additionally, national CSIRT has been established in the Slovak Republic – National Cyber Security Centre SK-CERT.

The Ministry of Justice of the Slovak Republic also established the cybersecurity as the new expert branch in the field of electrical engineering as per request of the National Security Authority. The National Security Authority organises seminars and training events to raise awareness of the obligations arising from the cybersecurity legislation.

(e) What should you be doing/on the lookout for?

First of all, the clients should assess whether they qualify as affected entities under NIS2. Consequently, they should consider actual status of their cybersecurity and gradually implement appropriate and adequate technical, operational and organisational measures in order to comply with the NIS2 and subsequently national legislation as well.