Cyber Law at Latvia
Latvia has significantly enhanced its cybersecurity framework with the enactment of the National Cyber Security Law, which came into effect on 1 September 2024. This legislation replaces the outdated Law on the Security of Information Technologies and aligns with the European Union's revised Network and Information Systems Directive (NIS2), aiming to establish a high common level of cybersecurity across the EU.
🛡️ Key Provisions of the National Cyber Security Law
Scope and Coverage
The law applies to a broad range of entities, including
- Providers of essential services such as energy, transport, water, healthcare, financial services, and education
- Providers of important services like digital services, electronic communications, public media, and manufacturing
- Critical information and communication technology (ICT) infrastructure These entities must register with the National Cybersecurity Centre (NCC) by 1 April 2025, appoint a Cyber Security Manager by 1 October 2025, and submit a self-assessment report by 1 October 2025
National Cybersecurity Centre (NCC)
The NCC, operated by the Ministry of Defence in cooperation with CERT.LV, serves as the central authority for cybersecurity matters. Its responsibilities include
- Monitoring the implementation of national cybersecurity requirements
- Developing national cybersecurity policy initiatives
- Overseeing the cybersecurity of essential and important service providers
- Coordinating with the Constitution Protection Bureau, which supervises critical ICT infrastructure
Compliance and Enforcement
Entities subject to the law must
- Ensure compliance with minimum cybersecurity requirements
- Report cybersecurity incidents promptly
- Develop and implement risk management and business continuity plans Failure to comply with these obligations may result in significant penalties, with fines reaching up to €10 million for severe non-compliance
🔐 Cybersecurity Strategy for 2023–2026
In parallel with the new law, Latvia has approved the Cybersecurity Strategy of Latvia for 2023–2026, which outlines the national approach to cybersecurity. The strategy focuses on:
Enhancing *cyber defense capabilities.
Increasing *resilience against cyberattacks.
Promoting public awareness of cyber threat.
Strengthening international cooperation in cybersecurity. This strategy aims to build a more secure and resilient cyberspace in Latvia.
RELATED Blog
0 comments