News
Insight

NIS2: Cybersecurity Act to take effect 15 January 2026

NIS2 5

The Swedish government has today approved a referral to the Council on Legislation that would implement the EU directive NIS2 into Swedish law, with the law potentially taking effect early next year. The Council on Legislation will first review the proposal, and then the Riksdag (Swedish parliament) will make its decision.

The directive will therefore be applied later in Sweden than in, for example, Finland and Denmark.

Sweden15 January 2026According to the referral to the Council on Legislation, the new Cybersecurity Act takes effect on 15 January 2026.
Finland8 April 2025The Riksdag (parliament) adopted the law on 8 April 2025. The obligations (reporting, risk management, notification) apply from the same date.
Denmark7 March and 1 July 2025Energy sector: 7 March 2025. Other sectors (telecom, water, healthcare): 1 July 2025.

Seclight — the right security, in the right order.

+46 8 94 55 99 info@seclight.com