Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 09 OCTOBER 2025

Market Intelligence Thought Leadership Award Winner

Strengthening Critical Infrastructure: Germany's New KRITIS Umbrella Law And NIS-2 Implementation

Jones Day
Jones Day
Contributor
Jones Day

Jones Day

Jones Day is a global law firm with more than 2,400 lawyers in 40 offices across five continents....

View firm profile
Explore more from Jones Day

Implementing the NIS-2 Directive (EU 2022/2555) and the Critical Entities Resilience ("CER") Directive (EU 2022/2557) into national law, Germany is reinforcing the security and resilience of its critical infrastructure, creating new compliance challenges and opportunities for organizations operating in or serving the German market.

GermanyTechnology
Undine Von Diemar
Undine Von Diemar
Jörg Hladjk
Jörg Hladjk
Holger Neumann
Holger Neumann
Bijan Tavakoli
Bijan Tavakoli
Author LinkedIn connections

Implementing the NIS-2 Directive (EU 2022/2555) and the Critical Entities Resilience ("CER") Directive (EU 2022/2557) into national law, Germany is reinforcing the security and resilience of its critical infrastructure, creating new compliance challenges and opportunities for organizations operating in or serving the German market.

The implementation comes under significant time pressure, as the transposition period for the NIS‑2 Directive expired in October 2024 (see our previous Alert), and the European Commission has already opened infringement proceedings against several Member States, including Germany. The NIS-2 Implementation Act broadens the scope compared with earlier rules on critical infrastructure, now also covering areas like digital services, including cloud service providers and data centers, as well as the manufacturing sector and postal and courier services. Within corporate groups, thresholds are measured at group level if a subsidiary relies on

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Deepfakes, Chatbots, AI-Generated Text: European Commission Details Transparency Obligations Under The AI Act

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
European UnionTechnology
Greenberg Traurig
Greenberg Traurig
Article

Deepfakes, Chatbots, KI-Texte: EU-Kommission Konkretisiert Transparenzpflichten Der KI-Verordnung

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
GermanyTechnology
Greenberg Traurig
Greenberg Traurig
Article

Cybercrime & Compliance: Navigating Risks In A Digital World – A Conference Report

Herbert Smith Freehills Kramer's Frankfurt Corporate Crime & Investigations team hosted a conference examining cybercrime threats, AI-driven attacks, and the evolving responsibilities of corporate leadership in building cyber resilience. Senior representatives from law enforcement, industry leaders, and global legal partners explored prevention strategies, incident response protocols, and the complex liability landscape facing organizations in an increasingly digital threat environment.
GermanyTechnology
Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP
Article

Ninth Circuit Vacates CFAA Injunction Against Perplexity's Comet AI Agent

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...
United StatesMedia, Telecoms, IT, Entertainment
Jones Day
Jones Day
Article

NYSE And Nasdaq Move To 23-Hour Trading Day: Overnight Session Is An Evolution, But Not Yet A Revolution

The New York Stock Exchange and Nasdaq are implementing overnight trading sessions starting December 6, 2026, extending the trading day to nearly 23 hours by compressing the daily pause to just one hour. While this evolution toward continuous trading introduces new considerations for corporate actions, disclosure timing, and deal execution, the practical impact varies significantly between NYSE-listed companies,
United StatesFinance and Banking
Jones Day
Jones Day
Article

China's Supreme Court Issues Landmark Judicial Rules On AI: Implications For Product Liability, IP, Data, And Generative AI

China's Supreme People's Court has issued comprehensive judicial rules addressing artificial intelligence disputes, establishing frameworks for product liability, intellectual property rights, and data protection. These landmark opinions provide critical guidance for global companies navigating AI-related legal risks in China's evolving regulatory landscape.
ChinaIntellectual Property
Jones Day
Jones Day
Article

EU Commission Pushes for Transposition of the EmpCo Directive on Environmental Claims

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.
European UnionConsumer Protection
Jones Day
Jones Day
Article

Amendment To The General Rules Under Mexico’s Anti-Money Laundering Law (LFPIORPI): Key Regulatory Changes Under Acuerdo 115/2026

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho
MexicoGovernment, Public Sector
Jones Day
Jones Day
Article

Commission Proposes EU Public Procurement Act

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.
European UnionGovernment, Public Sector
Jones Day
Jones Day
Article

Federal Court Holds New York’s Climate Superfund Law Preempted By CAA

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.
United StatesEnvironment
Jones Day
Jones Day
Article

Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case

The Ninth Circuit has ruled that health plan participants whose confidential information was disclosed without authorization have standing to sue in federal court, even without showing financial loss or future harm. This decision, which departs from the risk-based approach many courts have applied since TransUnion, relies on the centuries-old action for breach of confidence and could have significant implications for companies' privacy commitments and data-sharing practices.
United StatesLitigation, Mediation & Arbitration
Jones Day
Jones Day
Article

New EU Guidelines On Abuse Of Dominance: Recalibrated Framework, With Ample Room For Aggressive Enforcement

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market
European UnionAntitrust/Competition Law
Jones Day
Jones Day