The Federation of Employers and Industrialists (OEB) would like to inform you that a Public Consultation on the Regulations concerning the imposition of fees is underway, in the context of the implementation of the legislation on the Security of Network and Information Systems (harmonization with the NIS2 Directive).
The Consultation has been published on the e-Consultation online platform and is open for comments until Friday, February 27, 2026. Its full text is available here. The relevant legislation is also attached.
The framework under consultation sets out the fees to be paid by organisations and undertakings that qualify as core or significant entities, based on the relevant legislation and decisions of the competent authority.
Who is it for:
Businesses and organizations active, but not limited to, in sectors such as energy, transport, hospitals, digital services, telecommunications, cloud, data centers, critical infrastructure, and other critical services.
What changes in practice:
In addition to the cybersecurity compliance obligations, a financial burden is now introduced, through fees for supervision and implementation of the framework.
OEB considers it particularly important to record the views, concerns and suggestions of its members, especially with regard to:
- the adequate determination of the application of a minimum administrative fee;
- the decoupling of fees from the changing administrative costs of the Authority,
- the inability to have a credible budget for the year 2026 and beyond,
- the possible need for further specialisation and strengthening of controls for predictability, proportionality and fair distribution of compliance costs;
- and anything else that can affect these organizations.
Affected organizations and businesses are kindly requested to send their comments or suggestions to OEB, in mkallis@oeb.org.cy email by Wednesday, February 25, so that we can proceed in time with their assessment and utilization in the context of the Public Consultation.
N.89(I)_202_N.60(I)_2025 on Network and Information Systems Security (Consolidated)
