ITER/SISlovenia
What the record establishes for Slovenia: the bodies an insider event is reported to, the channel each takes, and the act that transposes the NIS2 Directive, Directive (EU) 2022/2555.
Recipients
| Reached under | Body | Channel | Source |
|---|---|---|---|
| Data protection authorityGDPR, article 33 | Information Commissioner of the Republic of Slovenia reported | — | edpb members |
| CSIRT or competent authorityNIS2, article 23 | The competent CSIRT group, under article 30(1) reported | Not set by the act, and there is no portal. Until the self-registration mechanism is in service the office takes the forms in digital form at the electronic address gp.uiv@gov.si. This record holds no `Portal` for Slovenia because there is not one to hold. | si zinfv 1 · ursiv prijava |
| Financial supervisorDORA, article 19 | Banka Slovenije reported | — | eba competent authorities |
| Market authorityMAR, article 17 | Agencija za trg Vrednostnih Papirjev (A-TVP) reported | — | esma mar nca |
Transposition of NIS2 binding
| Act | Zakon o informacijski varnosti, ZInfV-1, Uradni list RS št. 40/25 |
|---|---|
| In force | Article 70 puts it on the fifteenth day after publication in the Uradni list. Passed by the Državni zbor on 23 May 2025. |
| Recipient | The competent CSIRT group, under article 30(1) |
| Moves a term | Yes. The anchor is detection. Article 30(1) owes the early message «najpozneje pa v 24 urah po zaznavi pomembnega incidenta» and the incident notification «najpozneje pa v 72 urah po zaznavi pomembnega incidenta»: after the detection of the significant incident, where the Directive measures from becoming aware. Trust service providers report within twenty-four hours on the same footing. Everything after the anchor is the Directive's: an interim report on request, the final report within one month of the incident notification, and where the incident is still running, a progress report and the final report within one month of its resolution. |
| Standing | Read in the act as published in the Uradni list. Article 30(3) also puts a deadline on the authority: the CSIRT answers within twenty-four hours of the early message where possible: which Denmark and Estonia do too. |
| Source | si zinfv 1 |
An event in Slovenia
The five types, each opened on this jurisdiction: the acts it obliges, the term on each, and where the report goes.