{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Ellex Klavins","Sarmis Spilbergs"]
[null,null,"Edvijs Zandars"]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Latvia"]
["NIS2 Implementation Status"]
["Status","Enacted"]
["Status of the NIS2 Implementation Act","The \nNIS2 Directive is implemented in national legislation with the adoption of the \nNational Cybersecurity Law (\nNacionālais kiberdrošības likums).\nIn addition to the \nNational Cybersecurity Law, separate Cabinet of Minister regulations shall be adopted, which will further implement the requirements of the \nNIS2 Directive. Most importantly, the \nCabinet of Ministers Rules on Minimum Cybersecurity Requirements which implements \nArt. 21 of the NIS2 shall be adopted (not yet adopted).\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive"," \n The National Cybersecurity Law closely mirrors NIS2 requirements and obligations. \n Under the national law organizations must perform a self-assessment to determine whether it confirms the status of important or essential entity and must notify the supervisory authority if it confirms by 1 April 2025. In addition to essential and important entities, the national law implementing NIS2 also applies to owners/holders of critical infrastructure of information technologies. \n Subject scope extends also to direct and intermediate administrative bodies and other state institutions (except for state security institutions), all electronic communication merchants are considered essential entities, medium and large entities providing security services as well, regardless of the size of the entity, the maintainers of educational information systems are considered as important entities. \n The subjects will have to submit to the competent authority a self-assessment report, which indicates whether the entity complies with the statutory requirements and provides explanations for any non-compliance with the national law. The first self-assessment report will have to be submitted by October 1, 2025. \n "]
["Expected date of entry into force of the Implementation Act","The \nNational Cybersecurity Law came into force on 1 September 2024.\nThe \nCabinet of Ministers Rules on Minimum Cybersecurity Requirements are expected to be adopted in March-April 2025.\n"]