NIS2: Cybersecurity Act to take effect 15 January 2026
12 June 20251 min read
The Swedish government has today approved a referral to the Council on Legislation that would implement the EU directive NIS2 into Swedish law, with the law potentially taking effect early next year. The Council on Legislation will first review the proposal, and then the Riksdag (Swedish parliament) will make its decision.
The directive will therefore be applied later in Sweden than in, for example, Finland and Denmark.
Sweden
15 January 2026
According to the referral to the Council on Legislation, the new Cybersecurity Act takes effect on 15 January 2026.
Finland
8 April 2025
The Riksdag (parliament) adopted the law on 8 April 2025. The obligations (reporting, risk management, notification) apply from the same date.
Denmark
7 March and 1 July 2025
Energy sector: 7 March 2025. Other sectors (telecom, water, healthcare): 1 July 2025.
en
Seclight — the right security, in the right order.