Poland's NIS2 cybersecurity registry takes no paper filings: registration only goes through with a qualified e-signature
The Story
or Trusted Profile, and the window closes 3 October 2026.
Why It Matters
Before a company can even open the registration form at wykaz-ksc.gov.pl, it needs three things most 30 to 150 person firms have never assembled: a documented decision naming who is accountable for cybersecurity, a working contact list for incident reporting, and a full inventory of the company's public IP ranges and domains. None of that exists by default, and gathering it typically takes longer than the filing itself.
What To Do About It
If your business might fall under NIS2 (energy, transport, healthcare, digital infrastructure, and more), do not wait for the October deadline to discover nobody holds e-signature access. Confirm this week who holds a qualified e-signature or Trusted Profile for the company, and get the cybersecurity-accountable-officer decision written down.
Sources
Related Signals
Od 7 września 2026 operatorzy sieci dostają prawo zdalnie ograniczać moc mikroinstalacji 0,8-50 kW albo je odłączać, jeśli zagrażają sieci albo właściciel nie zainstaluje wymaganego urządzenia sterującego.
25 Aug 2026
A partir de 1 de outubro de 2026 entra em vigor o Decreto-Lei 108/2026: a comunicação prévia deixa de ter fase de saneamento e a obra pode arrancar logo após o pagamento das taxas.
25 Aug 2026
Od 7 stycznia 2026 obiekty do 200 m² na dwóch kondygnacjach powstają na zgłoszenie, nie pozwolenie na budowę, a nadzór budowlany dostał nowe narzędzie: 60 dni na poprawki zamiast wstrzymania robót.
25 Aug 2026