Cybersecurity Policy Report, Finland Prepares to Update Cybersecurity Law, (Jan 28, 2025)
Finland’s Ministry of Transport and Communications has announced that it was seeking comment on a government proposal that would supplement the implantation of the Directive on the Resilience of Critical Entities (CER) and the Cyber Security Directive (NIS 2).
The proposal would supplement the Cyber Security Act such that the obligations under the Act on Risk Management and Reporting of Significant Incidents in Cyber Security would also apply to entities identified as critical actors under the proposed Act on the Protection of Society’s Critical Infrastructure and Enhancing Resilience, the ministry said.
The proposals would align with the requirements of the CER and NIS 2 Directives. The obligations under the Cyber Security Act would extend to cover companies designated as critical, even if the company would not fall within the scope of the Cyber Security Act before being deemed critical, such as small or micro enterprises in all sectors and public service operators and pharmaceutical wholesalers identified as critical, it added.
Comments may be submitted at lausuntopalvelu.fi until Feb 10. The proposal is expected to be submitted to the Finnish parliament this spring.
News: InternationalLegislation DataSecurity