{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Šelih & Partnerji Law Firm","Barbara Hočevar"]
[]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 6/23/2026"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Slovenia"]
["NIS2 Implementation Status"]
["Status of the legislative process","Enacted"]
["Status of the NIS2 Implementation Act","The \nSlovenian Information Security Act (\"\nZInfV-1\"), implementing the \nNIS2 Directive, was adopted on 23 May 2025 and has been in force since 19 June 2025.\n"]
["Significant deviations of the National Implementation Act from the NIS2 Directive, if any"," \n The Slovenian Information Security Act (\" ZInfV-1 \") largely aligns with the NIS2 Directive and, in several respects, exceeds its minimum harmonisation requirements. \n Broader entity coverage: ZInfV-1 extends beyond the NIS2 Directive  by covering entities of national importance under protection and rescue plans, urban municipalities as local public authorities, and the defense sector, reflecting a broader national approach. \n Self-registration: ZInfV-1 introduces a national self-registration mechanism, requiring obligated entities to register within 30 days of triggering circumstances. \n Security measures and compliance: ZInfV-1 security measures broadly follow the NIS2 Directive but are implemented in a more granular and prescriptive manner at the national level. In particular, ZInfV-1 introduces additional obligations for essential and important entities, including the option to conduct background checks for staff or candidates in roles critical to network and information systems, requirements to establish logging and monitoring procedures to detect and mitigate incidents or near-incidents, and mandatory compliance assessments or self-assessments - depending on the entity’s classification - at least every two years or following a significant incident. \n Enhanced supervision and enforcement: Compared to the general NIS2 framework, ZInfV-1 grants the national competent authority, the Slovenian Government Information Security Office (\" URSIV \"), more explicit supervisory and enforcement powers, including the imposition of sanctions for misdemeanours. \n "]
["Date of entry into force of the Implementation Act","19 June 2025\n"]