European Sovereignty Monitor

Policy and law

Sweden adopts Cybersecurity Act transposing NIS2, effective January 2026

Sweden's government issued its new Cybersäkerhetslagen (SFS 2025:1506) on 11 December 2025, transposing the EU's NIS2 directive. The law takes effect on 15 January 2026 and requires operators in designated sectors to secure networks and report major incidents.

Verified Editor-read Government Offices of Sweden press release, 11 December 2025

What it does not test. This does not establish how Swedish authorities will supervise or enforce the law once it applies.

How this item counts. This item is dated before the index starts on 1 January 2026, so it does not count in the European Sovereignty Index.

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above; read and approved by the editor on 2026-10-07. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →