Act 2024
Law 5160/2024 (Government Gazette A 195/27.11.2024) — Transposition of Directive (EU) 2022/2555 (NIS 2) on measures for a high common level of cybersecurity across the Union, and other provisions
Issued by National Cybersecurity Authority
Plain-English summary
Greek NIS2 transposition, hosted here by ENISA. The National Cybersecurity Authority supervises essential and important entities and acts as single point of contact, CSIRT and cyber crisis management authority; the Authority's site cites Article 16 for staged incident notification.
Who it applies to
All industries
Topics
Cybersecurity & IT Risk
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Incident notification to the National Cybersecurity Authority (NIS2) | Deadline Early warning 24 hours; update 72 hours; final report 1 month | NCSA | official | |
Article 16 of Law 5160/2024 imposes stages of notification on essential and important entities: an early warning within 24 hours, a fuller update within 72 hours, an intermediate report on request and a final report within one month. Notices go to the NCSA CSIRT; central government and first- and second-tier local government notify the CSIRT of the National Intelligence Service with a copy to the NCSA. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.