ITER/SKSlovakia
What the record establishes for Slovakia: the bodies an insider event is reported to, the channel each takes, and the act that transposes the NIS2 Directive, Directive (EU) 2022/2555.
Recipients
| Reached under | Body | Channel | Source |
|---|---|---|---|
| Data protection authorityGDPR, article 33 | Úrad na ochranu osobných údajov Slovenskej republiky reported | — | edpb members |
| CSIRT or competent authorityNIS2, article 23 | The Národný bezpečnostný úrad, through the single cybersecurity information system binding | https://jiskb.nbu.gov.skchecked 2026-09-05 The jednotný informačný systém kybernetickej bezpečnosti, named in § 24(3) of the act itself. The Authority's own page describes it: «JISKB je informačný systém NBÚ, prostredníctvom ktorého prevádzkovatelia základných služieb plnia svoje povinnosti podľa zákona č. 69/2018 Z. z. o kybernetickej bezpečnosti. Slúži na registráciu, hlásenie incidentov, komunikáciu s NBÚ». An operator needs an account in it; a member of the public reports through SK-CERT instead | sk zakon 366 2024 · sk nbu jiskb |
| Financial supervisorDORA, article 19 | Národná banka Slovenska reported | — | eba competent authorities |
| Market authorityMAR, article 17 | Národná Banka Slovenska (NBS) reported | — | esma mar nca |
Transposition of NIS2 binding
| Act | Zákon č. 366/2024 Z. z., amending zákon č. 69/2018 Z. z. |
|---|---|
| In force | 1 January 2025, by article VII |
| Recipient | The Národný bezpečnostný úrad, through the single cybersecurity information system |
| Moves a term | Yes. The anchor is detection. Both stages run «od jeho zistenia», from the ascertaining of the significant incident: the early warning «najneskôr do 24 hodín od jeho zistenia», the notification «najneskôr do 72 hodín od jeho zistenia», twenty-four hours for a trust service provider. The Directive runs both from becoming aware. The final report keeps the month: «najneskôr jeden mesiac po nahlásení oznámenia». What follows it does not: where a cross-border incident is still running, letter (e) requires an updated final report within thirty days of normal operation being restored, and where the incident is still running when the final report is due, further information and an updated final report within thirty days of its resolution. |
| Standing | Read in the amending act as published by Slov-Lex, in the version in force from 1 January 2025. Slovakia is the third country in this record to replace awareness with a word of its own, after Finland's havaitseminen and Czechia's internal classification. |
| Source | sk zakon 366 2024 |
An event in Slovakia
The five types, each opened on this jurisdiction: the acts it obliges, the term on each, and where the report goes.