NIS2 and the New Cybersecurity Act - Deadline Passed, Sanctions May Apply!

12 Feb 2026

According to NÚKIB (the National Cyber and Information Security Agency), out of approximately 6,000 obligated entities, around 4,800 have so far notified a regulated service. The notification was to be submitted by the end of 2025.

NÚKIB is now starting to contact companies that were supposed to register but have not done so yet. These companies are already committing an administrative offence, and significant penalties may be imposed on them for failing to meet this obligation.

Not sure whether you need to notify a regulated service?

Don’t know how to implement the obligations under the new law?

Our firm has hands-on experience with NIS2 implementation and has a complete set of policies and related documentation. We will be happy to help you quickly submit the missing notification and align your internal processes with NIS2 requirements.