Check in 60 seconds whether NIS2 applies to you

NIS2 compliance in Slovenia — clarity in three minutes

NIS2 documents for 23 countries — based on each country's own law

Start the test — enter your details

The result with reasoning is shown immediately after answering. We use your details only for providing the NIS2 service.

23countries
21languages
5documents
3 400 EURpackage

Straight from the law

1. člen (vsebina zakona) (1) Ta zakon ureja področje informacijske in kibernetske varnosti ter določa nacionalni sistem informacijske varnosti v Republiki Sloveniji. Pri tem ureja pristojnosti, naloge, organizacijo in delovanje pristojnega nacionalnega organa za informacijsko varnost (v nadaljnjem besedilu: pristojni nacionalni organ), organa za obvladovanje incidentov velikih razsežnosti in kriz, enotne kontaktne točke za kibernetsko varnost (v nadaljnjem besedilu: enotna kontaktna točka) in skupin za odzivanje na incidente na področju računalniške varnosti (v nadaljnjem besedilu: skupine CSIRT), ureja sprejetje Strategije kibernetske varnosti Republike Slovenije, kibernetsko obrambo ter sodelovanje pristojnih državnih organov in skupin CSIRT. (2) Za ohranitev ključnih družbenih in gospodarskih dejavnosti v Republiki Sloveniji ta zakon določa tudi ukrepe za obvladovanje tveganj za informacijsko in kibernetsko varnost ter obveznost poročanja zavezancev po tem zakonu in prostovoljno priglasitev incidentov. Ureja tudi pravila in obveznosti glede izmenjave informacij o kibernetski varnosti ter nadzor, vključno za certificiranje za kibernetsko varnost.

ZInfV-1 1. člen

The text is from the country's official, enacted law — verbatim, not paraphrased.

Competent authority

Pristojni organ in obveznost priglasitve (Urad Vlade RS za informacijsko varnost, CSIRT — ZInfV-1 10. člen, 30. člen)

ZInfV-1 30. člen

The authority's details are from the country's official, enacted law: https://www.uradni-list.si/glasilo-uradni-list-rs/vsebina/2025-01-1571/zakon-o-informacijski-varnosti-zinfv-1

Data on an EU serverAll processing happens on a server located in the European Union — nothing leaves it.
GDPR by designConsent, the right to erasure and data minimisation are built in from the start.

What is NIS2 and who does it affect in Slovenia?

NIS2 is the European Union cybersecurity directive (EU) 2022/2555, transposed in Slovenia by the Zakon o informacijski varnosti, Uradni list RS št. 40/25 (ZInfV-1). It significantly widens the scope of obligations: energy, transport, healthcare, digital infrastructure, manufacturing, food industry and many other sectors must implement risk management measures and report incidents to the Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) (Urad Vlade Republike Slovenije za informacijsko varnost (URSIV)).

The deadlines are strict: a significant incident requires an early warning within 24 hours, a full notification within 72 hours and a final report within one month. Non-compliance can cost an essential entity up to 10 million euros or 2% of worldwide turnover, and an important entity up to 7 million euros or 1.4%.

Our portal turns NIS2 requirements into practice: the free scoping test shows whether NIS2 applies to your company, and the document package is generated automatically, grounded in the officially applicable law text for your country. Start with the test — it takes three minutes.

NIS2 transposition status by EU country

NIS2 incident reporting deadlines by EU country

NIS2 risk-management measures vs ISO 27001, DORA and GDPR

NIS2 administrative fines by country

NIS2 management body training obligation by country

The results are an indicative assessment, not legal advice. Your company remains responsible for the final content of any document.