- Status
- Transposed
- In force from
- 2026-01-15
- Implementing law
- Cybersäkerhetslag (SFS 2025:1506) — Cybersecurity Act
- EU infringement procedure
- Reasoned opinion
- Competent authority
- Myndigheten för samhällsskydd och beredskap (MSB), plus sectoral supervisors Competent authority NIS2 page →
- National CSIRT
- CERT-SE (within MSB) CSIRT website →
Notable national choices
- Late transposition: adopted by the Riksdag 11 December 2025, in force 15 January 2026.
- 'Whole-entity' approach — the law covers an organisation's entire IT footprint rather than just identified 'critical' services (broader than the NIS2 baseline).
- Explicit personal accountability of CEOs and boards reinforced in statute.
Sources
Last verified: