NIS2 › NIS2 transposition tracker
Bulgaria · BG
Закон за изменение и допълнение на Закона за киберсигурност (Act amending the Cybersecurity Act)
- Status
- Transposed
- In force from
- 2026-02-17
- Implementing law
- Закон за изменение и допълнение на Закона за киберсигурност (Act amending the Cybersecurity Act)
- EU infringement procedure
- Referred to CJEU
- Competent authority
- Министерство на електронното управление (Ministry of e-Government) Competent authority NIS2 page →
- National CSIRT
- CERT Bulgaria (CERT.BG) CSIRT website →
Notable national choices
- Extremely late transposition — adopted 5 February 2026, published 13 February 2026, in force 17 February 2026 (about 16 months past the EU deadline).
- No transitional compliance period; reduced sanctions apply only for breaches occurring before 1 June 2026.
- Sectors expanded from 8 (under NIS1) to 18; designation-based system replaced with automatic size/sector coverage.
Sources
Last verified: