Kiri

REPuBLIc OF EsT0NIA MINIsTRY OF JusTIcE AND DIGITAL AFFAIRs

Cecilie Holtermann Vinderslev GDPR specialist Roesgaard [email protected]

Your Ref: 24.032025

Our Ref: 28.03.2025 No 21-1/25/2787-2

Answer to request

Dear Ms Vinderslev,

We receved Your request regarding Directive (EU) 2022/2555 of the European Parliament and of the Council (NIS2 Directive) and ts transposition to Estonian Iaw.

We are currently in the process of drafting the national legislation that shall make amendments to our national laws (primarily to our Cybersecurity Act1) in order to transpose NIS2 Directive. We conducted our draft Iaw’s public consultations and are currently reviewing the feedback so that we can senci the revised version of the draft law to the Government of the Republic before this summer and from there to our national parliament (Riigikogu) for passing draft Iaw.

Our general aim is to transpose NIS2 Directive narrowly, hence in the draft Iaw2 that was in the public consultations, we followed the size criteria as it is foreseen in Article 2 (1) of NIS2 Directive. The same position should remain with the revised text.

Yours sincerely,

Jj

Taavi Vjilukas Director of National Cyber Security

Raavo Palu raavo.paIujustdigi.ee

Link: https://www.riigiteataia.ee!en/eli/5 1908202401 9/consolide. 2 Found here (in Estonian): https://eelnoud.valitsus.ee/main/mount/docList/c774c2e2-Oc3e-4 1 37-b24b- b49d1249f326. See ,,kooskölastatavad dokurnendid”, specifically ,,24-1266/0l”, klick on the plus (+) and it contaiiis the texts in PDF foniiat: file ,,eelnöu” is the draft law, file ,,seletuskiri” is the explanatory memorandum to the draft law, (‘He ,,seletuskiija usa 1 (vastavustabel)” is the transposition tabel and file ,seIetuskiija usa 2 (mätiruste kavandid)” is the draft secondary legislation.

Suur-Ameerika 1/10122 Tallinn / ESTONIA! +372 620 8100 / [email protected] / www.justdigi.ee Reg.no 70000898