PSNC Penalties & Risks for Public Administration | ComplyDev

PSNC. Protection of national critical infrastructure Competent Authority: ACN - National Cybersecurity Agency. Deadline: Ongoing compliance

Last updated: 13/03/2026

Key Points

  • Notification of significant ICT incidents within 6 hours
  • ICT procurement from qualified suppliers
  • Inspections and audits by ACN
  • Enhanced security measures on networks, systems, and data
  • Applicable to identified critical operators

What is PSNC and how does it apply to Public Administration?

PSNC. Protection of national critical infrastructure Competent Authority: ACN - National Cybersecurity Agency. Legal Basis: Law 133/2019 - Decree-Law 105/2019. Deadline: Ongoing compliance

Who in the Public Administration sector must comply with PSNC?

PSNC. Municipalities, regions, ministries and public bodies 20-5000 employees. For Medium enterprises (50–249 employees) in the Public Administration sector, PSNC compliance requires specific attention to: Key Requirements: Notification of significant ICT incidents within 6 hours; ICT procurement from qualified suppliers; Inspections and audits by ACN.

Penalties for non-compliance with PSNC

Penalties: Criminal and administrative penalties up to €150K. Important: The PSNC compliance deadline is approaching. Do not wait to start your assessment.

How to start your PSNC compliance journey

Check your PSNC compliance for free. ComplyDev's AI-powered assessment analyses your Public Administration company against 111+ EU regulations in 20 minutes — no registration, no credit card. Key Requirements: Notification of significant ICT incidents within 6 hours; ICT procurement from qualified suppliers; Inspections and audits by ACN.

Sector Advice

  • Check your PSNC compliance for free. ComplyDev's AI-powered assessment analyses your Public Administration company against 111+ EU regulations in 20 minutes — no registration, no credit card.
  • For Medium enterprises (50–249 employees) in the Public Administration sector, PSNC compliance requires specific attention to:
  • Penalties & Risks: ACN - National Cybersecurity Agency. Deadline: Ongoing compliance.

Frequently Asked Questions

PSNC Key Requirements
Notification of significant ICT incidents within 6 hours; ICT procurement from qualified suppliers; Inspections and audits by ACN; Enhanced security measures on networks, systems, and data; Applicable to identified critical operators
PSNC Penalties
Criminal and administrative penalties up to €150K
PSNC - Public Administration
Start your free cybersecurity compliance assessment — no registration required, results in 20 minutes.

Related Pages

Want a Detailed Report?

With the Premium plan you get full gap analysis, intervention plan and personalised cost estimates.

View Plans