Checked on September 27, 2026
NIS2 in Lithuania
How Lithuania applies the NIS2 cybersecurity directive: the national law, who supervises, and how to register and report incidents.
- Transposition status
- In force
- National law
- Law on Cyber Security of the Republic of Lithuania (as amended 11 July 2024) · Lietuvos Respublikos kibernetinio saugumo įstatymas · from October 18, 2024
- Competent authority
- National Cyber Security Centre (Ministry of National Defence) (Nacionalinis kibernetinio saugumo centras (NKSC))
- National CSIRT
- NKSC (national CSIRT)
- Registration
- See note
NKSC keeps a non-public Register of Cybersecurity entities (1,443 initially) and notified entities of their status around 17 Apr 2025.
- Incident reporting
- Significant incidents reported to NKSC (national CSIRT) per implementing rules adopted Nov 2024; Directive timelines 24h/72h/1 month.
- National specifics
- Implementing government resolution on technical/organisational requirements, reporting and designation adopted Nov 2024.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.