The Cybersecurity Act and HAKOM’s Role
Pursuant to the Cybersecurity Act (Official Gazette No. 14/24), HAKOM has been appointed as the competent authority for implementing cybersecurity requirements for providers of public electronic communications networks and providers of publicly available electronic communications services. The Cybersecurity Act transposes the NIS2 Directive into national legislation. More information on the NIS2 Directive can be found on the European Commission’s website at the provided link.
As the competent authority for enforcing cybersecurity requirements for providers of public electronic communications networks and providers of publicly available electronic communications services, HAKOM carries out the following tasks:
As the competent authority for enforcing cybersecurity requirements for providers of public electronic communications networks and providers of publicly available electronic communications services, HAKOM carries out the following tasks:
- Conducting the categorisation of entities and establishing and maintaining lists of key and important entities;
- Carrying out professional supervision of key and important entities in the implementation of cybersecurity requirements, in accordance with the Cybersecurity Act and the Cybersecurity Regulation;
- Collaborating and coordinating with the state administration authorities responsible for the sector in which the entities under HAKOM’s jurisdiction operate, in matters of entity categorisation, handling significant incidents, and professional supervision;
- Working closely with, and exchanging relevant information with, data protection authorities when resolving incidents resulting in personal data breaches, and with law enforcement authorities when incidents arise from criminal activities;
- Collaborating with, and exchanging relevant information and experience with, other competent authorities responsible for enforcing cybersecurity requirements;
- Cooperating and exchanging relevant information with the national coordination centre;
- Collaborating with competent CSIRTs; and
- Performing other tasks as prescribed by the Cybersecurity Act.