CRA Compliance in Slovenia

Slovenia's CRA enforcement is coordinated between AKOS (market surveillance and regulatory functions) and SI-CERT (incident coordination). The Market Inspectorate of the Republic of Slovenia (Tržni inšpektorat RS) conducts product safety market surveillance and will partner with AKOS on CRA enforcement activities. Slovenia has transposed NIS2 through amendments to the Zakon o informacijski varnosti (ZInfV), establishing the NCA and CSIRT functions for cybersecurity oversight. Slovenian manufacturers — particularly in the highly capable pharmaceutical, industrial automation, and electronics sectors — have significant CRA obligations.

Slovenian manufacturers submit Article 14 notifications to SI-CERT through its secure contact channels. SI-CERT operates 24/7 incident response capability and participates in the EU CSIRTs network. The Article 14 obligation requires an early warning within 24 hours of detecting active exploitation and a full notification within 72 hours. SI-CERT has decades of experience coordinating incident responses across Slovenian public and private sectors, providing operational maturity for CRA incident management. Manufacturers should register with SI-CERT and establish a designated security contact ahead of any incident.

Market surveillance for CRA products in Slovenia is coordinated between AKOS and the Market Inspectorate (Tržni inšpektorat RS). The full CRA penalty regime applies: up to €15 million or 2.5% of global annual turnover for violations of essential cybersecurity requirements. The Market Inspectorate has active enforcement capabilities under EU product safety regulations. Slovenian manufacturers should maintain CRA technical documentation in both Slovenian and English, and should expect documentation-based surveillance as the primary tool in the early years of CRA application.

SI-CERT and AKOS publish cybersecurity guidance for Slovenian businesses in Slovenian and English. The Slovenian Enterprise Development Fund (SPS) provides SME support including innovation grants applicable to cybersecurity investments. The Chamber of Commerce and Industry of Slovenia (GZS) provides regulatory compliance guidance for manufacturing members. The Jožef Stefan Institute provides technical research and conformity assessment expertise. SPIRIT Slovenia (Public Agency for Entrepreneurship, Internationalization, Foreign Investments and Technology) supports manufacturer export capacity including EU regulatory compliance.