Share on LinkedInShare on LinkedIn

ARTICLE · 13 MARCH 2026

New Cybersecurity Regulations In Germany—Registration Requirement Expires On 6 March 2026

K&L Gates
K&L Gates
Contributor
K&L Gates

K&L Gates

The Firm K&L Gates is an integrated, international law firm. As a single global law firm, truly...

View firm profile
Explore more from K&L Gates

After a delay of more than a year, the German implementation law for the NIS2 Directive (Directive (EU) 2022/2555) came into force in December 2025 (Law on the Implementation of the NIS 2 Directive and on the Regulation of Essential Features of Information Security Management in the Federal Administration).

GermanyTechnology

After a delay of more than a year, the German implementation law for the NIS2 Directive (Directive (EU) 2022/2555) came into force in December 2025 (Law on the Implementation of the NIS 2 Directive and on the Regulation of Essential Features of Information Security Management in the Federal Administration). The law provides for significant changes and revisions to various cybersecurity laws, in particular the BSI Act.

Many more companies than before now fall within the scope of the BSI Act. Previously, the BSI Act only regulated traditional critical infrastructure such as transport and traffic, energy, finance, health, research, and the telecommunications industry. Now, the digital sector is also covered, in particular cloud computing services, data center operators, managed (security) service providers, and providers of online marketplaces, online search engines, and social networks. The production and trade of chemical substances, the production, processing, and

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from