Incident reporting

• Determination No. 314287/2026 of the Director General of the National Cybersecurity Agency on the terms, procedures and use of the NIS digital platform

  ItalyRegulationACN Determination No. 314287/202620 October 2026

• Ordinance of the Cybersecurity Authority on detailed requirements for cybersecurity risk-management measures and further criteria for significant incidents (NISV 2026)

  AustriaRegulationBGBl. II Nr. 290/20261 October 2026

• Decree of 8 July 2026 laying down rules implementing the Cybersecurity Act and setting the date of its entry into force (Cyberbeveiligingsbesluit)

  NetherlandsDecreeStb. 2026, 1898 July 2026

• Cybersecurity Act (Cbw)

  NetherlandsLawStb. 2026, 1878 July 2026

• Critical Entities Resilience Act (Wwke)

  NetherlandsLawStb. 2026, 1888 July 2026

• Regulation No 756/2026 implementing the Legal Framework for Cybersecurity approved by Decree-Law No 125/2025

  PortugalRegulationRegulamento n.º 756/202617 June 2026

• An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts (S.C. 2026, c. 9)

  CanadaLawS.C. 2026, c. 915 June 2026

• 2023-2030 Australian Cyber Security Strategy - Horizon 2 Action Plan

  AustraliaAction / implementation plan11 June 2026

• Crisis Situations and National Defence Act

  EstoniaLawRT I, 30.06.2026, 12 June 2026

• Act on the cyber resilience of certain products and on cybersecurity certification

  FinlandLaw439/202629 May 2026

• Act of 29 May 2026 amending the Crisis Management Act and certain other acts

  PolandLawDz.U. 2026 poz. 81529 May 2026

• Law of 5 May 2026 on the resilience of critical entities

  LuxembourgLawMémorial A n° 2265 May 2026

• Act of 5 May 2026 on measures to ensure a high level of cybersecurity

  LuxembourgLawMémorial A n° 225 de 20265 May 2026

• Organic Law for the Strengthening of Cybersecurity

  EcuadorLawRegistro Oficial, Quinto Suplemento N.º 29031 March 2026

• Act implementing Directive (EU) 2022/2557 and strengthening the resilience of critical facilities (KRITIS umbrella act)

  GermanyLawBGBl. 2026 I Nr. 6611 March 2026

• Determination of the Director General of the National Cybersecurity Agency of 9 February 2026 – Taxonomy of incidents under Article 1(1) of Law No. 90 of 28 June 2024

  ItalyRegulationGU n. 39 del 17.02.2026 (26A00713)9 February 2026

• Act amending and supplementing the Cybersecurity Act

  BulgariaLawДВ, бр. 17 от 13.02.20265 February 2026

• Act of 23 January 2026 amending the Act on the National Cybersecurity System and certain other acts

  PolandLawDz.U. 2026 poz. 25223 January 2026

• Resilience of Critical Entities and Infrastructures (Identification, Designation and Protection) Order, 2026

  MaltaRegulationS.L. 460.43 (L.N. 5 of 2026)January 2026

• Law of 19 December 2025 on the resilience of critical entities

  BelgiumLawMoniteur belge, 19.01.202619 December 2025

• Determination No. 379907/2025 of the Director General of the National Cybersecurity Agency – Basic specifications for the obligations under Articles 23, 24, 25, 29 and 32 of the NIS Decree

  ItalyRegulationACN Determination No. 379907/202519 December 2025

• Network and Information Systems Security Act 2026 (NISG 2026)

  AustriaLawBGBl. I Nr. 94/202512 December 2025

• Cybersecurity Act

  SwedenLawSFS 2025:150611 December 2025

• Act amending the Cybersecurity Act and other acts (transposition of the NIS 2 Directive)

  EstoniaLawRT I, 30.12.2025, 410 December 2025

• Act implementing the NIS 2 Directive and regulating essential features of information security management in the federal administration (NIS2UmsuCG)

  GermanyLawBGBl. 2025 I Nr. 3012 December 2025

• Agreement issuing the General Cybersecurity Policy for the Federal Public Administration

  MexicoRegulation2 December 2025

• Digital Personal Data Protection Rules, 2025

  IndiaRegulationG.S.R. 846(E)13 November 2025

• Decree-Law No 125/2025 – Legal framework for cybersecurity

  PortugalDecreeDecreto-Lei n.º 125/20255 November 2025

• Supreme Decree 126-2025-PCM approving the Regulation of Emergency Decree 007-2020 on the Digital Trust Framework

  PeruDecreeDecreto Supremo N° 126-2025-PCM4 November 2025

• Law on Information Security (Serbia, 2025)

  SerbiaLawSlužbeni glasnik RS, br. 91/202522 October 2025

• Law 5236/2025 on the resilience of critical entities

  GreeceLawΦΕΚ Α' 175/10.10.20259 October 2025

• Critical Entities Resilience Act (RKEG)

  AustriaLawBGBl. I Nr. 60/202524 September 2025

• Administrative Measures for National Cybersecurity Incident Reporting

  ChinaRegulation11 September 2025

• Critical Infrastructure Act

  CzechiaLaw266/2025 Sb.3 July 2025

• Civil Defence (Resilience of Critical Entities) Regulations of 2025

  CyprusRegulationΚ.Δ.Π. 204/2025July 2025

• North Macedonia's Law on Security of Network and Information Systems

  North MacedoniaLawOfficial Gazette No. 135/202527 June 2025

• Act on the protection of society's critical infrastructure and the improvement of its resilience

  FinlandLaw310/202513 June 2025

• Amendments to the National Security Law

  LatviaLaw12 June 2025

• Cybersecurity Act

  CzechiaLaw264/2025 Sb.11 June 2025

• Critical Infrastructure Act

  CroatiaLawNN 89/20256 June 2025

• Act on the Prevention of Damage Caused by Unauthorized Acts against Important Computers (Active Cyber Defense Act)

  JapanLawAct No. 42 of 2025 (令和7年法律第42号)23 May 2025

• Act on the resilience of critical entities

  DenmarkLawLov nr. 433 af 6. maj 20256 May 2025

• Act on measures to ensure a high level of cybersecurity (NIS 2 Act)

  DenmarkLawLov nr. 434 af 6. maj 20256 May 2025

• Security of Networks and Information Systems (Amendment) Law of 2025

  CyprusLawΝ. 60(Ι)/202525 April 2025

• Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order, 2025 (S.L. 460.41)

  MaltaRegulationL.N. 71 of 20258 April 2025

• Cybersecurity Act

  FinlandLaw124/20257 April 2025

• Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653)

  Hong KongLawCap. 65328 March 2025

• Law amending certain laws of Ukraine on information protection and cyber protection of state information resources and critical information infrastructure objects

  UkraineLaw№ 4336-IX27 March 2025

• Türkiye's Cyber Security Law (Law No. 7545)

  TürkiyeLawKanun No. 7545 (Resmî Gazete 32846)12 March 2025

• Ordinance on Cybersecurity (Cybersecurity Ordinance, CSO)

  SwitzerlandRegulationSR 128.517 March 2025

• Decree-Law No 22/2025 on the resilience of critical entities

  PortugalDecreeDecreto-Lei n.º 22/20259 January 2025

• Government Emergency Ordinance No 155/2024 establishing a framework for the cybersecurity of networks and information systems in the national civilian cyberspace

  RomaniaDecreeOUG 155/2024 (Monitorul Oficial nr. 1332 din 31.12.2024)30 December 2024

• Act LXIX of 2024 on the cybersecurity of Hungary

  HungaryLaw2024. évi LXIX. törvény17 December 2024

• Act LXXXIV of 2024 on the resilience of critical entities

  HungaryLaw2024. évi LXXXIV. törvény17 December 2024

• Cyber Security Act (CSG) of 5 December 2024 (Liechtenstein)

  LiechtensteinLawLGBl. 2025 Nr. 111 (LR 784.13)5 December 2024

• Cyber Security Act 2024

  AustraliaLawAct No. 98, 202429 November 2024

• Law 5160/2024 – Transposition of Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union

  GreeceLawΦΕΚ Α' 195/27.11.202427 November 2024

• Law No 294/2024 on the resilience of critical entities

  RomaniaLawLegea nr. 294/202427 November 2024

• Act on critical infrastructure and amending certain acts

  SlovakiaLaw367/2024 Z. z.27 November 2024

• Critical Infrastructure Act (ZKI-1)

  SloveniaLawUradni list RS, št. 102/202422 November 2024

• Law on Information Security (Montenegro, 2024)

  MontenegroLawSlužbeni list CG, br. 113/202419 November 2024

• Act amending the Crisis Management and Civil Protection Act No VIII-971

  LithuaniaLaw7 November 2024

• Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)

  European UnionRegulationRegulation (EU) 2024/284723 October 2024

• European Union (Resilience of Critical Entities) Regulations 2024

  IrelandRegulationS.I. No. 559 of 202415 October 2024

• Act amending the Emergency Act and other related acts

  EstoniaLawRT I, 08.10.2024, 125 September 2024Superseded

• Legislative Decree No. 134 of 4 September 2024 implementing Directive (EU) 2022/2557 on the resilience of critical entities

  ItalyDecreeD.Lgs. 134/20244 September 2024

• Legislative Decree No. 138 of 4 September 2024 transposing Directive (EU) 2022/2555 (NIS 2)

  ItalyDecreeD.Lgs. 138/20244 September 2024

• Regulations on Network Data Security Management

  ChinaRegulationState Council Decree No. 79030 August 2024

• Law amending Cybersecurity Law No XII-1428

  LithuaniaLawNr. XIV-290211 July 2024

• Law No. 90 of 28 June 2024 on strengthening national cybersecurity and on computer crimes

  ItalyLawL. 90/202428 June 2024

• Malaysia's Cyber Security Act 2024 (Act 854)

  MalaysiaLawAct 85426 June 2024

• National Cybersecurity Law

  LatviaLawLatvijas Vēstnesis, 128A, 04.07.202420 June 2024

• Act of 26 April 2024 establishing a framework for the cybersecurity of network and information systems of general interest for public security

  BelgiumLawMoniteur belge, 17.05.202426 April 2024

• Chile's Cybersecurity Framework Law (Law 21.663)

  ChileLawLey 21.66326 March 2024

• Cybersecurity Act

  CroatiaLawNN 14/202426 January 2024

• Act on Digital Security (Digital Security Act)

  NorwayLawLOV-2023-12-20-10820 December 2023

• Regulation (EU, Euratom) 2023/2841 laying down measures for a high common level of cybersecurity at the institutions, bodies, offices and agencies of the Union

  European UnionRegulationRegulation (EU, Euratom) 2023/284113 December 2023

• The Digital Personal Data Protection Act, 2023 (No. 22 of 2023)

  IndiaLawAct No. 22 of 202311 August 2023

• Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (SEC Release No. 33-11216)

  United StatesRegulationRelease Nos. 33-11216; 34-97989; 88 FR 5189626 July 2023

• Kosovo's Law No. 08/L-173 on Cyber Security

  KosovoLawLaw No. 08/L-1732 February 2023

• Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)

  European UnionRegulationRegulation (EU) 2022/255414 December 2022

• Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)

  European UnionDirectiveDirective (EU) 2022/255514 December 2022

• Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA)

  United StatesLawPub. L. 117-103, Division Y15 March 2022

• Mauritius' Cybersecurity and Cybercrime Act 2021

  MauritiusLawAct No. 16 of 202124 November 2021

• Ghana's Directive for the Protection of Critical Information Infrastructure

  GhanaDirectiveOctober 2021

• Regulations on the Security Protection of Critical Information Infrastructure

  ChinaRegulationState Council Decree No. 74530 July 2021

• Data Security Law of the People's Republic of China

  ChinaLawPresidential Order No. 8410 June 2021

• Prime Ministerial Decree No. 81 of 14 April 2021 – Regulation on the notification of incidents affecting the networks, information systems and IT services referred to in Article 1(2)(b) of Decree-Law No. 105 of 21 September 2019, and on measures to ensure high levels of security

  ItalyDecreeDPCM 81/202114 April 2021

• Ghana's Cybersecurity Act, 2020 (Act 1038)

  GhanaLawAct 103829 December 2020

• Federal Act on Information Security in the Federal Administration (Information Security Act, ISA)

  SwitzerlandLawRS 12818 December 2020

• Decree-Law No. 105 of 21 September 2019 on the national cybersecurity perimeter

  ItalyDecreeD.L. 105/2019, conv. L. 133/201921 September 2019

• Thailand's Cybersecurity Act B.E. 2562 (2019)

  ThailandLaw24 May 2019

• European Union (Measures for a High Common Level of Security of Network and Information Systems) Regulations 2018

  IrelandRegulationS.I. No. 360 of 201818 September 2018

• Royal Decree-Law 12/2018 of 7 September on the security of network and information systems

  SpainDecreeReal Decreto-ley 12/20187 September 2018

• Rwanda's Law No. 60/2018 on prevention and punishment of cyber crimes

  RwandaLawLaw Nº 60/201822 August 2018

• Taiwan's Cyber Security Management Act (2018)

  TaiwanLaw6 June 2018

• The Network and Information Systems Regulations 2018

  United KingdomRegulationSI 2018/50619 April 2018

• Security of Critical Infrastructure Act 2018

  AustraliaLawNo. 29, 201811 April 2018

• Law No. 2018-133 of 26 February 2018 on various provisions adapting to EU law in the field of security

  FranceLawLoi n° 2018-13326 February 2018

• Cybersecurity Act 2018

  SingaporeLawAct 9 of 20185 February 2018

• Act No. 69/2018 Coll. on Cybersecurity

  SlovakiaLaw69/2018 Z. z.30 January 2018

• Cybersecurity Law of the People's Republic of China

  ChinaLawPresidential Order No. 537 November 2016

• Nigeria's Cybercrimes (Prohibition, Prevention, etc.) Act, 2015

  NigeriaLawAct No. 17 of 201515 May 2015

• Federal Information Security Modernization Act of 2014 (FISMA)

  United StatesLawPublic Law 113-28318 December 2014

• Personal Information Protection Act (South Korea)

  South KoreaLawAct No. 1046529 March 2011

• Act on Promotion of Information and Communications Network Utilization and Information Protection

  South KoreaLawAct No. 636016 January 2001

• India's Information Technology Act, 2000

  IndiaLawAct No. 21 of 20009 June 2000

The page address contains your search: copy it to share.