📋 Tender Overview
On June 19, 2025, the new Information Security Act (ZInfV-1) entered into force, with which the Republic of Slovenia strengthens and upgrades the national cybersecurity system and transposes Directive (EU) 2022/2555 on measures for a high common level of cybersecurity in the Union (NIS Directive 2) into Slovenian legal order.ZInfV-1 regulates information and cyber security, defines the responsibilities of key authorities, and establishes a national information security system, including CSIRT groups and the Cyber Security Strategy. The Act introduces measures for risk management, reporting by obligated parties, and voluntary incident reporting. It also regulates certification, information exchange, and supervision. It defines obligated parties from the annexes to the Act and additional ones depending on their importance. The innovations include a platform for self-registration, incident reporting, and information exchange. ZInfV-1 contributes to strengthening the cyber resilience of the economy. Companies will reduce the likelihood of attacks and financial consequences with the measures, and cross-border business will be simplified. The Act also promotes innovation and development, and cybersecurity opens up new opportunities for regions in transformation. The Act strengthens trust in digital services, encourages new jobs and investments in knowledge. It supports cooperation between the public and private sectors, reduces the risks of data misuse, and enables more efficient incident management and rational upgrading of existing practices. Frequently asked questions with answers are available, which are particularly helpful to taxpayers in understanding and implementing the legal provisions.
