Law 5160/2024 transposing NIS 2

Summary

The law transposes the NIS 2 Directive in Greece. It defines essential and important entities, risk-management and incident-reporting duties and the powers of the National Cybersecurity Authority; the national framework of cybersecurity requirements is set by Joint Ministerial Decision 1689/2025.

Information

Jurisdiction

Greece

Issuing body

Βουλή των Ελλήνων (Hellenic Parliament)

Type

Law

Available languages

Greek

Topics

• Critical infrastructure
• Governance and coordination
• Incident management / CSIRT
• Incident reporting
• Supply chain

Notes

In force from publication. The link points to the Gazette issue published by the National Cybersecurity Authority. The adoption date given is the date of the law, promulgated and published in FEK A' 195 of 27 November 2024. For municipalities (first-level local authorities) the law was due to apply from 27 November 2025, but Joint Ministerial Decision 2267/2025 (FEK B' 5472 of 14 October 2025) postponed its application to 27 November 2026. The registration platform was set up by Joint Decision 1381/2025 (FEK B' 463); the registration deadline, extended to 30 May 2025 by Decision 1645/2025, was then moved to 30 September 2025 by Decision 1990/2025 (FEK B' 4241). The national framework of cybersecurity requirements is set by Joint Decision 1689/2025 (FEK B' 2186), and Ministerial Decision 1899/2025 (FEK B' 4250) governs the information and communication systems security officers. In 2026 the Authority issued circulars on the cybersecurity measures of public bodies (No. 20718 of 8 June 2026) and on vulnerability management by essential entities (No. 28427 of 30 July 2026).

Βουλή των Ελλήνων (Hellenic Parliament). (2024). Νόμος 5160/2024 – Ενσωμάτωση της Οδηγίας (ΕΕ) 2022/2555 για μέτρα για υψηλό κοινό επίπεδο κυβερνοασφάλειας σε ολόκληρη την Ένωση (ΦΕΚ Α' 195/27.11.2024). https://cyber.gov.gr/wp-content/uploads/2024/12/ENOTHTA_5_%CE%9D%CE%9F%CE%9C%CE%9F%CE%98%CE%95%CE%A3%CE%99%CE%91_fek_a_195_2024-5160-2024.pdf

Βουλή των Ελλήνων (Hellenic Parliament). "Νόμος 5160/2024 – Ενσωμάτωση της Οδηγίας (ΕΕ) 2022/2555 για μέτρα για υψηλό κοινό επίπεδο κυβερνοασφάλειας σε ολόκληρη την Ένωση." 27 November 2024. https://cyber.gov.gr/wp-content/uploads/2024/12/ENOTHTA_5_%CE%9D%CE%9F%CE%9C%CE%9F%CE%98%CE%95%CE%A3%CE%99%CE%91_fek_a_195_2024-5160-2024.pdf.

@misc{gr_nomos_5160_2024_nis2,
  author       = {{Βουλή των Ελλήνων (Hellenic Parliament)}},
  title        = {{Νόμος 5160/2024 – Ενσωμάτωση της Οδηγίας (ΕΕ) 2022/2555 για μέτρα για υψηλό κοινό επίπεδο κυβερνοασφάλειας σε ολόκληρη την Ένωση}},
  year         = {2024},
  note         = {ΦΕΚ Α' 195/27.11.2024},
  url          = {https://cyber.gov.gr/wp-content/uploads/2024/12/ENOTHTA_5_%CE%9D%CE%9F%CE%9C%CE%9F%CE%98%CE%95%CE%A3%CE%99%CE%91_fek_a_195_2024-5160-2024.pdf},
  urldate      = {2026-10-29}
}