Digital Policy Alert logo

Sweden: Cybersecurity Act (2025:1506) implementing NIS 2 Directive

Progress

Current status
in force
15 Jan 2026 in force
10 Dec 2025 adopted
14 Oct 2025 under deliberation

Scope

Implementers
Sweden
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
Government Body
parliament
Implementation Level
national

Timeline of events

15 Jan 2026
in force

Cybersecurity Act (2025:1506) enters into force

On 15 January 2026, the Cybersecurity Act (2025:1506), transposing Directive (EU) 2022/2555 (NIS 2 Directive), enters into force. The Act applies to public and private operators that fall within its scope under Chapters 1 and 2, including operators …

Source
Event type law
Action type implementation
Government branch legislature
Government body parliament
10 Dec 2025
adopted

Parliament adopted Cybersecurity Act (2025:1506)

On 10 December 2025, the Swedish Parliament adopted the Cybersecurity Act (2025:1506), transposing Directive (EU) 2022/2555 (NIS 2 Directive), which will enter into force on 15 January 2026. The Act applies to public and private operators that fall …

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
14 Oct 2025
under deliberation

Cybersecurity Act (2025:1506) was introduced to Parliament

On 14 October 2025, the Cybersecurity Act (2025:1506), transposing Directive (EU) 2022/2555 (NIS 2 Directive), was introduced to the Swedish Parliament. The Act would apply to public and private operators that fall within its scope under Chapters 1 …

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament