NIS2
NIS2 registration in Estonia
Who has to register, with which authority, by when, and what the submission contains. Read from the authority's own pages in Estonia.
- Who it applies to
- Essential and important entities in the Directive's sectors, above its size thresholds.
- The dates
- The Directive has applied since 18 October 2024. Each state's own dates are in its act.
- The one thing to do
- Register with the authority below, through the route it names.
Where you register in Estonia
Registration
Riigi Infosüsteemi Amet (RIA), which houses NCSC-EE and CERT-EE
read on 28 September 2026
The act it rests on
The route is the one set by Küberturvalisuse seadus (KÜTS) § 3 lg 1.
Notified to the Commission: Küberturvalisuse seaduse ja teiste seaduste muutmise seadus (küberturvalisuse 2. direktiivi ülevõtmine), dated 30 December 2025. The national publication
What to have ready
Article 3(4) sets the minimum a registration contains, whatever the route looks like.
For the purpose of establishing the list referred to in paragraph 3, Member States shall require the entities referred to in that paragraph to submit at least the following information to the competent authorities: (a) the name of the entity; (b) the address and up-to-date contact details, including email addresses, IP ranges and telephone numbers; (c) where applicable, the relevant sector and subsector referred to in Annex I or II; and (d) where applicable, a list of the Member States where they provide services falling within the scope of this Directive.
The NIS2 Registration Pack
The forms, the sector mapping and the evidence list, for Estonia and the other twenty-six.
Read from the authority's own pages on 28 September 2026. The page we read
Related:Every register for EstoniaThe transposition registerAll twenty-seven states