{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"COBALT Law Firm","Egon Talur"]
[null,null,"Priit Põld"]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 11/19/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Estonia"]
["NIS2 Implementation Status"]
["Status","On hold"]
["Status of the NIS2 Implementation Act","The \nAct Amending the Cybersecurity Actand Other Acts (Transposition of the \nNIS2 Directive) was published on 9 December 2024, and coordination is currently awaited both at the public sector level and through opinions from various stakeholders no later than 31 January 2025.\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive","No significant deviations from the \nNIS2 Directive are expected. According to the explanatory memorandum for the draft law, its wording primarily focuses on what the \nNIS2 Directive has specified in a narrower sense.\nAdditionally, the explanatory memorandum notes that, as \nDirective 2016/1148 (\"\nNIS 1 Directive\") was transposed more broadly than required and due to the establishment of the Estonian Information Security Standard in 2022 along with the obligation to comply with it, the transposition of the \nNIS2 Directive into Estonian law is easier, as many of its requirements are already fulfilled under Estonia's existing legislation.\nThe draft law mainly aims to clarify provisions in the current legislation and establish a few new norms. According to the authors of the draft, the primary change is the expansion of the list of entities subject to the \nCybersecurity Act. Currently, approximately 3,500 organizations are required to comply with the \nAct, and an estimated 2,000 additional organizations will be included under the draft.\n"]
["Expected date of entry into force of the Implementation Act","The implementation law is currently planned to enter into force on 1 July 2025.\n"]