Checked on September 27, 2026
NIS2 in Latvia
How Latvia applies the NIS2 cybersecurity directive: the national law, who supervises, and how to register and report incidents.
- Transposition status
- In force
- National law
- National Cybersecurity Law · Nacionālās kiberdrošības likums · from September 1, 2024
- Competent authority
- National Cyber Security Centre (Ministry of Defence) (Nacionālais kiberdrošības centrs)
- National CSIRT
- CERT.LV
- Registration
- Required · deadline April 1, 2025
Register with the NCSC by 1 Apr 2025; appoint a cybersecurity manager and submit self-assessment by 1 Oct 2025.
- Incident reporting
- Significant incidents reported to CERT.LV: early warning within 24h, report within 72h, final report within 1 month.
- National specifics
- Replaced the Information Technologies Security Law; adopted by the Saeima on 20 June 2024.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.