Law 60(I)/2025 transposing NIS 2

Summary

The law transposes the NIS 2 Directive in Cyprus by amending Law 89(I)/2020 on the security of networks and information systems. It extends obligations to essential and important entities, with risk-management measures and incident reporting, under the supervision of the Digital Security Authority (DSA).

Information

Jurisdiction

Cyprus

Issuing body

Βουλή των Αντιπροσώπων (House of Representatives of Cyprus)

Type

Law

Available languages

Greek

Topics

• Critical infrastructure
• Governance and coordination
• Incident management / CSIRT
• Incident reporting
• Supply chain

Notes

Amends Law 89(I)/2020 on the security of network and information systems. Published in Official Gazette No. 5036 of 25 April 2025. The adoption date given is the date of publication in the Official Gazette (No. 5036 of 25 April 2025).

Βουλή των Αντιπροσώπων (House of Representatives of Cyprus). (2025). Ο περί Ασφάλειας Δικτύων και Συστημάτων Πληροφοριών (Τροποποιητικός) Νόμος του 2025 (Ν. 60(Ι)/2025). https://www.cylaw.org/nomoi/arith/2025_1_060.pdf

Βουλή των Αντιπροσώπων (House of Representatives of Cyprus). "Ο περί Ασφάλειας Δικτύων και Συστημάτων Πληροφοριών (Τροποποιητικός) Νόμος του 2025." 25 April 2025. https://www.cylaw.org/nomoi/arith/2025_1_060.pdf.

@misc{cy_nomos_60_i_2025_nis2,
  author       = {{Βουλή των Αντιπροσώπων (House of Representatives of Cyprus)}},
  title        = {{Ο περί Ασφάλειας Δικτύων και Συστημάτων Πληροφοριών (Τροποποιητικός) Νόμος του 2025}},
  year         = {2025},
  note         = {Ν. 60(Ι)/2025},
  url          = {https://www.cylaw.org/nomoi/arith/2025_1_060.pdf},
  urldate      = {2026-10-29}
}