Uutiset-näyttösivun murupolku en

Registration open for Fimea’s NIS2 entity list

22.4.2025 | Published in English on 24.4.2025 at 15.42

The essential and important entities referred to in the Cybersecurity Act that will be under Fimea’s supervision in Finland can now register with Fimea by using a PDF form.

Check the Cybersecurity Act to see if you are a NIS2 entity. Being included in the NIS2 entity list is determined by factors such as the size and sector of your company. Annexes 1 and 2 to the Cybersecurity Act list entities in the health and manufacturing sectors that will be supervised by Fimea.

Under section 47 of the Cybersecurity Act, the notification referred to in section 41 of the Act must be submitted no later than one month after the entry into force of the Act (by 8 May 2025) or when the criteria of an entity referred to in section 3 are met. The Cybersecurity Act entered into force on 8 April 2025.

The notification must specify the entity details referred to in section 41 of the Cybersecurity Act, which include:

Name of the entity
Address, email address, telephone number and other up-to-date contact information;
IP address range;
The relevant sector and part thereof referred to in Annex I or II to the NIS2 Directive;
Whether it is an essential entity;
List of the EU Member States where it provides services covered by the NIS2 Directive; and
Participation in a voluntary cybersecurity information-sharing arrangement referred to in section 23

How to submit a PDF notification:

Fill in the details of the company you represent on the PDF form
Send the form via Fimea’s secure mail to [email protected]
Instructions for using Fimea’s secure mail are available on Fimea’s Secure Mail page
You will receive a confirmation from the service email address when your message has been received
An e-service for registration will be available later. Fimea will share more information about the e-service later.