NIS2 · National implementation
NIS2 in Bulgaria
Bulgaria transposed NIS2 by amending its Cybersecurity Act (Закон за киберсигурност), with the amendment in force since 13 February 2026 — after a CJEU referral for the delay.
- National law
- Закон за киберсигурност (amended)
- Cybersecurity Act, as amended
- Status
- In force
- In force
- 13 February 2026
- Authority
- Ministry of e-Government and sector bodies
Supervision
Bulgaria's model spreads roles across the Ministry of e-Government and sector bodies, with a national coordinator and national CSIRT. Registration mechanics follow the amendment's implementing acts.
What is specific to Bulgaria
As one of the referred member states, Bulgaria legislated under enforcement pressure; the amendment layers NIS2 onto the 2018 act, so entities must read the consolidated text. Implementing regulations carry the operative detail.
Official sources
Primary references: the national statute book at dv.parliament.bg and the national cybersecurity authority at www.govcert.bg.
NIS2 in Bulgaria: frequently asked questions
Last reviewed:
Related reading
Definitions