Skip to content

National Annex — Slovakia (SK)

Status (July 2026): In force. Community-maintained orientation, not legal advice — verify against the official gazette and authority guidance before relying on it. Corrections welcome (see CONTRIBUTING.md).

NIS2 implementation

Field Value
Implementing law Act No. 366/2024 amending Act No. 69/2018 on Cybersecurity — effective 1 January 2025
Competent authority NBÚ (Národný bezpečnostný úrad)
National CSIRT / reporting SK-CERT (NBÚ)
Official starting point https://www.nbu.gov.sk

Country notes for your CDC

Registration through the NBÚ single information system (JISKB); Slovak measures decree specifies controls.

Standard checklist (all countries)

  • [ ] Applicability determined per legal entity and sector; recorded in the regulatory applicability register (GOVERN)
  • [ ] Entity registration completed with the national authority where required
  • [ ] Incident-reporting procedure drilled against the national channel and the 24 h early-warning clock (RESPOND)
  • [ ] Contact established with the national CSIRT before the first incident
  • [ ] Data protection authority contact and GDPR Art. 33 flow prepared (runs in parallel with NIS2 reporting)
  • [ ] National guidance/frameworks mapped to your control evidence (see note above)

Selector tag

sk-nat — tick "Slovakia" in tools/regulatory-profile.html to include this country's references.

Open CDC Framework (CC BY 4.0).