SecvalisbySYSDEVOPS.EU

Entry in the Wykaz KSC register: what to prepare

A preparation checklist for an entity that is to be entered in the register of essential and important entities. Informational material, not legal advice.

First: which route applies

There are two routes into the Wykaz KSC register. Entities subject to self-registration file an application for entry. Four categories of entity are entered ex officio and file no application; they supply their data once called upon.

Entered ex officio:

  • public entities designated in the act (art. 7a ust. 2 ustawa o KSC (Dz.U. 2026 poz. 252))
  • electronic communications undertakings (art. 7a ust. 2 ustawa o KSC (Dz.U. 2026 poz. 252))
  • trust service providers (art. 7a ust. 2 ustawa o KSC (Dz.U. 2026 poz. 252))
  • critical entities (art. 7a ust. 2 ustawa o KSC (Dz.U. 2026 poz. 252))

  • Entities that were operators of essential services under the previous regime move into the Wykaz KSC register under the transitional provisions, without filing a fresh application.

    art. 34 ust. 2 nowelizacji (Dz.U. 2026 poz. 252)

  • No application does not mean no entry. The authority can enter an entity in the register also where the entity filed no application.

    art. 7j ust. 1 ustawa o KSC (Dz.U. 2026 poz. 252)

The application window

Entities subject to self-registration file the application in the window from 2026-05-07 to 2026-10-03. The window comes from the Announcement of the Minister of Digital Affairs of 8 April 2026 (Dz. Urz. MC 2026 poz. 7).

The schedule comes from a ministerial announcement rather than directly from the act, and can be changed by a further announcement under Art. 34(5) of the amendment.

What the application contains

Registration data and entity classification

  • Name of the entity

    art. 7 ust. 2 pkt 1 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Legal form and the number in the register of entrepreneurs or in the business activity records

    art. 7 ust. 2 pkt 2 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Tax identification number (NIP)

    art. 7 ust. 2 pkt 3 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • REGON statistical number

    art. 7 ust. 2 pkt 4 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Address of the registered office or place of residence

    art. 7 ust. 2 pkt 5 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Electronic delivery address and the entity's e-mail address

    art. 7 ust. 2 pkt 6 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Sector, subsector and type of entity per annex 1 or annex 2 to the act

    art. 7 ust. 2 pkt 7 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Indication whether the entity applies as an essential entity or as an important entity

    art. 7 ust. 2 pkt 8 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • List of the services provided by the entity that fall under the act

    art. 7 ust. 2 pkt 9 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

Technical data on the services provided

  • IP addresses and address ranges used to provide the services falling under the act

    art. 7 ust. 2 pkt 10 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Domain names used to provide those services

    art. 7 ust. 2 pkt 11 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Member States of the European Union where the entity provides services falling under the act

    art. 7 ust. 2 pkt 12 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

People and contact channels

  • Given name, surname, telephone number and e-mail address of the designated contact person

    art. 7 ust. 2 pkt 13 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Details of the person authorised to represent the entity

    art. 7 ust. 2 pkt 14 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

Declarations and attachments

  • Declaration that the data given in the application is true

    art. 7 ust. 2 pkt 17 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2; rygor odpowiedzialności karnej za złożenie fałszywego oświadczenia: art. 7c ust. 5 ustawa o KSC (Dz.U. 2026 poz. 252) w zw. z art. 233 § 6 Kodeksu karnego

Special cases: entries that apply only to some entities

  • Details of the representative established in the European Union

    Applies to entities required to designate a representative in the European Union.

    art. 7 ust. 2 pkt 15 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2; obowiązek ustanowienia przedstawiciela: art. 5a ust. 7 ustawa o KSC (Dz.U. 2026 poz. 252)

  • Main establishment in the European Union

    Applies to entities operating in more than one Member State, which have to indicate their main establishment.

    art. 7 ust. 2 pkt 16 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2

  • Agreement on jointly providing a service, where the service is provided jointly with another entity

    Applies to entities that provide a service falling under the act jointly with another entity under an agreement.

    art. 7 ust. 2 pkt 18 ustawa o KSC (Dz.U. 2026 poz. 252), stosowany do wniosku o wpis przez art. 7c ust. 2; porozumienie o wspólnym świadczeniu usługi: art. 8h ust. 6 ustawa o KSC (Dz.U. 2026 poz. 252)

Formal requirements

  • The application is filed in electronic form.

    art. 7c ust. 6 ustawa o KSC (Dz.U. 2026 poz. 252)

  • The application carries a declaration made subject to criminal liability for making a false declaration, so the data has to be confirmed before filing, not afterwards.

    art. 7c ust. 5 ustawa o KSC (Dz.U. 2026 poz. 252) w zw. z art. 233 § 6 Kodeksu karnego

  • The application is signed by the person authorised to represent the entity, so it is worth checking the rules of representation before the data set is ready.

    art. 7c ust. 5 i 6 ustawa o KSC (Dz.U. 2026 poz. 252)

  • An entity that starts meeting the criteria later files the application within 6 months of the day it started meeting them. That is a separate track from the one-off window set by the ministerial announcement.

    art. 7c ust. 1 ustawa o KSC (Dz.U. 2026 poz. 252)

What follows from not filing

  • Failing to file the application breaches a statutory duty for which the competent authority may impose a financial penalty. May, not must: the provision is discretionary and does not operate automatically.

    art. 73 ust. 1a pkt 1 oraz art. 73 ust. 3-4 ustawa o KSC (Dz.U. 2026 poz. 252)

  • Financial penalties cannot be imposed earlier than two years after the amendment entered into force.

    art. 35 nowelizacji (Dz.U. 2026 poz. 252)

  • Beyond a financial penalty, the act provides supervisory measures against essential and important entities, independent of the entry itself.

    art. 73a ustawa o KSC (Dz.U. 2026 poz. 252)

This is an informational material, not legal advice. It does not settle whether the act covers your organisation or whether an application is complete. Confirm the scope of the application and the way of filing it against the source text of the act, with a person holding the relevant legal competence.

Where Secvalis fits

Secvalis does not file the application and does not decide whether the act covers you. It keeps the technical part that stays after the entry: an inventory of machines, vulnerabilities with their history, remediation deadlines and an audit pack you can hand over.

See a sample Evidence PackStart free trial

Not sure whether the act covers you at all? Start with the self-check.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS