NIS2 Implementation in the EU |
|
Finland |
|
|
(Europe)
Firm
Roschier, Attorneys Ltd.
Contributors
Johanna Lilja |
|
| Status | Enacted |
| Status of the NIS2 Implementation Act | The NIS2 Directive has been transposed into Finnish law by the Finnish Cybersecurity Act (124/2025), consolidating the obligations related to cybersecurity risk management and incident reporting for entities within its scope. |
| If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive | The Cybersecurity Act implemented NIS2 into national legislation at the minimum level required, both in terms of scope and obligations. |
| Expected date of entry into force of the Implementation Act | The Cybersecurity Act entered into force on 8 April 2025. |
NIS2 Implementation in the EU
Enacted
The NIS2 Directive has been transposed into Finnish law by the Finnish Cybersecurity Act (124/2025), consolidating the obligations related to cybersecurity risk management and incident reporting for entities within its scope.
The Cybersecurity Act implemented NIS2 into national legislation at the minimum level required, both in terms of scope and obligations.
The Cybersecurity Act entered into force on 8 April 2025.