The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you

NIS2

NIS2 registration in Croatia

Who has to register, with which authority, by when, and what the submission contains. Read from the authority's own pages in Croatia.

Who it applies to
Essential and important entities in the Directive's sectors, above its size thresholds.
The dates
The Directive has applied since 18 October 2024. Each state's own dates are in its act.
The one thing to do
Wait to be entered: the authority registers entities itself, and reviews that continuously.

Where you register in Croatia

Registration

Sigurnosno-obavještajna agencija (SOA), named the central state body for cyber security by Article 61(2) of the Act, acting through the Nacionalni centar za kibernetičku sigurnost; Annex III gives a different competent authority per sector, the Hrvatska narodna banka for banking and HANFA for financial market infrastructure enters entities in its register itself, so there is nothing to submit. An entity it has not entered has no duty yet, and the register is reviewed continuously, so that can change.

read on 29 September 2026

The authority's NIS2 page

The act it rests on

The route is the one set by Zakon o kibernetičkoj sigurnosti (NN 14/2024), in force 15 February 2024, with Uredba o kibernetičkoj sigurnosti (NN 135/2024), in force 30 November 2024.

Notified to the Commission: Zakon o kibernetičkoj sigurnosti, dated 7 February 2024.

What to have ready

Article 3(4) sets the minimum a registration contains, whatever the route looks like.

For the purpose of establishing the list referred to in paragraph 3, Member States shall require the entities referred to in that paragraph to submit at least the following information to the competent authorities: (a) the name of the entity; (b) the address and up-to-date contact details, including email addresses, IP ranges and telephone numbers; (c) where applicable, the relevant sector and subsector referred to in Annex I or II; and (d) where applicable, a list of the Member States where they provide services falling within the scope of this Directive.

The NIS2 Registration Pack

The forms, the sector mapping and the evidence list, for Croatia and the other twenty-six.

Read from the authority's own pages on 29 September 2026. The page we read

Related:Every register for CroatiaThe transposition registerAll twenty-seven states

This page in:DeutschFrançaisNederlandsEspañolDansk