📋 Tender Overview
On April 10, 2025, the Government of the Republic of Slovenia adopted the text of the proposal for the new Information Security Act (ZINFV-1), drawn up by the Office of the Government of the Republic of Slovenia for Information Security (URSIV). The proposal will be submitted to the National Assembly of the Republic of Slovenia by urgent procedure.With the new law, the Government of the Republic of Slovenia upgrades the National Cyber Security System and transfers the European Directive NIS2 into its legal order (Directive 2022/2555/EU). The Information Security Act is a systemic law in the field of information and cyber security and establishes a comprehensive national system for managing such risks. It contributes significantly to raising the level of cyber security in the public and private sectors and increases Slovenias resistance to cyber threats. Particular emphasis is placed in areas that are crucial for the smooth functioning of the country and to preserve the provision of essential social and economic activities.
The ZINFV-1 defines the responsibilities, organization and tasks of key actors in the field of information security, including the competent national information security body, the Big Dimensions and Crisis Information Management Authority, the single contact point for cyber security and the computer security incidents group (CSIRT). It is determined by taxpayers who are public or private entities from the attachment of the law. In accordance with Directive, Nis 2 introduces several sectors and entities. Taxpayers are obliged to comply with risk management measures and notify important incidents. The emphasis is also the day of the management and responsibility of the entities. Important novelties include the introduction of a platform for the self -registration of taxpayers, a single platform for the application of incidents, and the platforms for the safe exchange of information.
The new law regulates cyber defense and the cooperation of the competent state bodies and groups of CSIRT, provides for measures to manage risks for information and cyber security and the obligation to report taxpayers and voluntary notification of incidents. The law also regulates the rules and obligations regarding the exchange of information on cyber security and control, including cyber security certification. It also provides for the adoption of cyber security strategy of the Republic of Slovenia and the national response plan. The latter will define the goals and regulation of cyber incidents, cyber incidents of large dimensions and crises.
In the formation of the ZINFV-1 proposal, the Government has taken into account the experience in the management of incidents, the findings of crisis response exercises and the recommendations of stakeholders in the field of coordination of cyber security. Coordination and participation of stakeholders, the new law is given even greater importance. With the new law, in addition to the transfer of Directive NIS 2, we introduce and upgrade the national provisions of information and cyber security, which raises the resilience of key entities in the Republic of Slovenia. Thus, we continue to strengthen the national cyber security system, strengthen responsive capacity and build cyber defense capacity. The system provided for by the new law will have a positive impact on the rise of society and the economy.
The law will enter into force on the fifteenth day after its publication in the Official Gazette of the Republic of Slovenia.
